Proposed mandatory bindings for web SSO

["Mishra, Prateek" <pmishra@netegrity.com>]

 

Mandatory to implement bindings for Web SSO

 

The terminology used is that of IdP, SP, AuthNRequest and AuthNResponse.

 

An IdP responds

to AuthNRequests originating from an SP. An SP originates AuthNRequests to an IdP and accepts

responses back from the IdP.

 

 Each

component of a binding is written using function notation, BindingName(Message).

 

 

 

(1) At the IdP, the following implementations are mandatory:

 

Responds to: HTTP-redirect(AuthNRequest)

Responds with: HTTP POST(AuthNResponse), HTTP Artifact(AuthNResponse)

 

 

(2) At the SP, the following implementations are mandatory:

 

Originates: HTTP-redirect(AuthNRequest)

 

Accepts: HTTP POST(AuthNResponse), HTTP Artifact(AuthNResponse)