Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

The namespace and binding attributes attached to the <DiscoveryResponse> element are defined in the SAML V2.0 Identity Provider Discovery Protocol and Profile specification. The endpoint location is the return address for the SP, that is, where the Discovery Service returns to once the user's preferred IdP has been determined.

If your SP supports SAML V2SAML V2.0, and the SP is configured to use the SAML V2SAML V2.0 Identity Provider Discovery Protocol, you must configure your SP's metadata to include one or more <DiscoveryResponse> elements. If you don't, a request to a properly configured discovery service endpoint (such as the InCommon Discovery Service) will fail.

If You must also ensure that you have added SAML V2.0 endpoints and support to your metadata if your SP is configured to utilize SAML V2.0issue SAML V2.0 authentication requests, you must add one or more SAML V2.0 <AsssertionConsumerService> endpoints to your metadata. Failure to do so will result in errors when SAML V2.0 such requests are issued by the SP to IdPs in the InCommon Federation that support SAML V2SAML V2.0 , because since your metadata will indicate a lack of support for that protocol. Simply add an <AsssertionConsumerService> endpoint for at least the SAML V2.0 HTTP-POST Binding using the site admin web application.

Configuring your SAML Service Provider Software

...