Hi Peter,
On Mon, Oct 7, 2013 at 6:30 AM, Peter Schober
<> wrote:
>
> ... the IdP would never be able
> to pick the "right" SingleLogoutService Location (given more than one
> SingleLogoutService element with the same Binding and the "unindexed"
> endpoint type) and would probably just pick the first one in SAML
> metadata with a supported Binding (assuming the IdP consumed SAML
> metadata for runtime behaviour).
>
> As such adding any additional SingleLogoutService elements would be
> superfluous and would never achieve anything, right?
FWIW, I've always considered such metadata to be bugged. There can be
at most one non-indexed endpoint for each Binding value.
Tom
