We’re
missing a definition in the Fed metadata document for where to find the passive
requestor endpoints.
Proposal:
Add a new section preceding
the example document section 3.1.16.
3.1.xx
PassiveRequestorEndpoints Element
The optional <fed:PassiveRequestorEndpoints> element allows a federation metadata
provider, security token service, or relying party to specify the endpoint
address that supports the Web (Passive) Requestor protocol described below in
section 13. This element populates the [Federation Metadata] property. This is
an endpoint-level statement.
The schema for this optional
element is shown below.
<fed:PassiveRequestorEndpoints>
<wsa:EndpointReference>
… </wsa:EndpointReference>+
</fed:PassiveRequestorEndpoints>
The content
of this element is an endpoint reference element as defined by [WS-Addressing]
that identifies an endpoint address that supports receiving the Web (Passive)
Requestor protocol messages described below in section 13.
This element allows attributes
to be added so long as they do not alter the semantics defined in this
specification.
It should be noted that this
element MAY occur multiple times indicating distinct endpoints with different
capabilities. Service providers MUST include functionally equivalent endpoints
in a single <fed:PassiveRequestorEndpoints> element.
The following example
illustrates using this optional element to specify the endpoint address that
supports the Web (Passive) Requestor protocol described in section 13 for the
token issuing STS of the federating organization.
<fed:PassiveRequestorEndpoints>
<wsa:EndpointReference>
<wsa:Address> http://fabrikam.com/federation/STS/Passive </wsa:Address>
</wsa:EndpointReference>
</fed:PassiveRequestorEndpoints>