First steps towards a SAML 2.0 conformance matrix

This message
describes the approach to conformance at a high-level, without explicitly
calling

the exact bindings supported. The idea here is
to obtain buy-in at a high-level for the approach and

at the next level begin work on the set of
supported bindings at each end-point.

 

(1) SSO and
Logout

 

Support for
mandatory SSO bindings at SP and IdP.

Support for
HTTP-redirect and SOAP bindings for <LogoutRequest>,
<LogoutResponse>

 

Includes
One-Time (Anonymous) Name Identifiers, Affiliations

 

 

(2) Name Identifer Management and Mapping

 

Support for
HTTP-redirect and SOAP bindings for <NameIDMappingRequest/Response>,

<ManageNameIDRequest/Response>

 

(3) ECP 

IdP and SP implement <AuthNRequest/Response>
using the ECP binding

 

Includes
Identity Provider Proxy

 

 

(4) Assertion
Query and Request

 

SOAP Bindings
for <AuthNQuery>, <AttributeQuery>,
<AssertionIDRequest>

 

SAML URI
bindings

 

 

-------------------------------------------------------------------

 

Valid
combinations:

 

(1) 

 

(1) + (2)

 

(1) + (4)

 

(1) + (2) + (3)

 

(1) + (2) +
(3) + (4)

 

---------------------------------------------------------------------