Security Assertion Markup Language: Difference between revisions

Revision as of 05:59, 22 September 2023

Revision as of 14:58, 25 September 2023

Line 104:

# Authorization decision query

The result of an attribute query is a SAML response containing an assertion, which itself contains an attribute statement. See the SAML 2.0 topic for [[SAML 2.0#SAML Attributeattribute Queryquery|an example of attribute query/response]].

Beyond queries, SAML 1.1 specifies no other protocols.

Line 125:

SAML 1.1 specifies just one binding, the SAML SOAP Binding. In addition to SOAP, implicit in SAML 1.1 Web Browser SSO are the precursors of the HTTP POST Binding, the HTTP Redirect Binding, and the HTTP Artifact Binding. These are not defined explicitly, however, and are only used in conjunction with SAML 1.1 Web Browser SSO. The notion of binding is not fully developed until SAML 2.0.

SAML 2.0 completely separates the binding concept from the underlying profile. In fact, there is a brand [[SAML 2.0#SAML 2.0 Bindingsbindings|new binding specification in SAML 2.0]] that defines the following standalone bindings:

* SAML SOAP Binding (based on SOAP 1.1)

* Reverse SOAP (PAOS) Binding