PE25 SAML Metadata Feature in SAMLConf - Updated "two options" Proposal

["Nick Ragouzis" <nickr@enosis.com>]

In hopes of bringing the proposal in accordance with the 
30Aug05 discussion:

Proposed Errata PE25:

Document: Conformance 

Description: Conformance document does not specify any 
requirements with respect to metadata. It is suggested that 
the conformance document be updated as follows. 
 

Change to Table 2: Feature Matrix

                         IdP    IdPLite   SP   SPLite   ECP
FEATURE
Metadata Structures      OPT      OPT    OPT    OPT     N/A  
Metadata Interoperation  OPT      OPT    OPT    OPT     N/A


Change to Table 4: SAML Authority and Requester Matrix

                       AuthnAuth AttribAuth AuthZDcsnAuth Requester
FEATURE
Metadata Structures      OPT        OPT          OPT          OPT
Metadata Interoperation  OPT        OPT          OPT          OPT


New sub-sections to Section 3 (Conformance):


3.6 Metadata Structures 
Implementations claiming conformance to SAMLv2.0 may declare each 
operational mode's conformance to SAMLv2.0 Metadata [SAMLMeta] 
through election of the Metadata Structures option.

With respect to each operational mode, such conformance entails 
the following:

* Implementing SAML metadata according to the extensible SAMLv2.0 
Metadata format in all cases where an interoperating peer has the 
option, as stated in SAMLv2.0 specifications, of depending on the 
existence of SAMLv2.0 Metadata. Electing the Metadata Structures 
option has the effect of requiring such metadata be available to 
the interoperating peer. The Metadata Interoperation feature, 
described below, provides a means of satisfying this requirement.

* Referencing, consuming, and adherence to the SAML metadata, 
according to [SAMLMeta], of an interoperating peer when the known 
metadata relevant to that peer and the particular operation, and 
the current exchange, has expired or is no longer valid in cache, 
provided the metadata is available and is not prohibited by policy 
or the particular operation and that specific exchange.


3.7 Metadata Interoperation 
Election of the Metadata Interoperation option requires the 
implementation offer, in addition to any other mechanism, the 
well-known location publication and resolution mechanism described 
in SAML metadata [SAMLMeta].