RE: [saml-dev] SAML Attribute assertions question

["Scott Cantor" <cantor.2@osu.edu>]

> * Is there a separate profile defined to enable this?

Other than the thin profile defined to cover attribute query via SOAP, any
other use of attributes during SSO is entirely unspecified. A robust
implementation has to include a large set of capabilities for push or pull
regardless of the bindings used.

Metadata exists to facilitate certain aspects of this, so that IdPs can
determine what attributes an SP may want, and an SP can reference its own
metadata using AttributeConsumingServiceIndex.

-- Scott