Re: [saml-dev] IdP DS Protocol and Profile

[Tom Scavo <trscavo@gmail.com>]

On Thu, Sep 30, 2010 at 11:57 AM, Scott Cantor <cantor.2@osu.edu> wrote:
> BTW, the DS protocol is SSO protocol agnostic. Using it doesn't imply any
> particular SAML version (or SAML at all) between the SP and the selected
> IdP. That was one of the possible extensions that might involve the policy
> parameter, some way to filter the result by supported protocol, but the
> basic protocol ignores that use case.

You read my mind! The idea was that an SP could give the DS a hint as
to what protocols it supported. I spoke with Lukas Hämmerle
(maintainer of the SWITCH DS) about this but he's inclined to parse
the metadata just-in-time (which makes sense actually).

Tom