First steps towards a SAML 2.0 conformance matrix

["Mishra, Prateek" <pmishra@netegrity.com>]

This message describes the approach to conformance at a high-level, without explicitly calling

the exact bindings supported. The idea here is to obtain buy-in at a high-level for the approach and

at the next level begin work on the set of supported bindings at each end-point.

 

(1) SSO and Logout

 

Support for mandatory SSO bindings at SP and IdP.

Support for HTTP-redirect and SOAP bindings for <LogoutRequest>, <LogoutResponse>

 

Includes One-Time (Anonymous) Name Identifiers, Affiliations

 

 

(2) Name Identifer Management and Mapping

 

Support for HTTP-redirect and SOAP bindings for <NameIDMappingRequest/Response>,

<ManageNameIDRequest/Response>

 

(3) ECP

IdP and SP implement <AuthNRequest/Response> using the ECP binding

 

Includes Identity Provider Proxy

 

 

(4) Assertion Query and Request

 

SOAP Bindings for <AuthNQuery>, <AttributeQuery>, <AssertionIDRequest>

 

SAML URI bindings

 

 

-------------------------------------------------------------------

 

Valid combinations:

 

(1)

 

(1) + (2)

 

(1) + (4)

 

(1) + (2) + (3)

 

(1) + (2) + (3) + (4)

 

---------------------------------------------------------------------