Seeking clarity on the Conformance specification, Table 2

["Costello, Roger L." <costello@mitre.org>]

Hi Folks,

 

I am not clear on what is being stated in Table 2 of the Conformance specification.

 

Here is a snippet of Table 2:

 

Feature                                |     IdP      |    SP

---------------------------------------------------------

Web SSO, <AuthnRequest>,  |    MUST   |   MUST

HTTP redirect

 

Question: how do I interpret this?  Is it saying,

 

“To be SAML 2.0 compliant, an Identity Provider (IdP) and a Service Provider (SP) MUST implement the Web Browser Single Sign-on (SSO) profile; a SP MUST be able to issue an Authentication Request (<AuthnRequest>) using the HTTP redirect mechanism.”

 

Is that what it’s saying?

 

Thanks.  /Roger