ArtifactResolutionService
Ā
TheĀ <md:ArtifactResolutionService>
Ā element is used to configure handlers that are responsible for resolving SAML 2.0 artifacts into protocol messages.
The HTTP-Artifact binding in SAML 2.0 allows messages sent by the SP to an IdP to be carried by reference using a simple redirect, instead of by value. The downside is that an extra callback is required to turn the artifact back into the original message, typically using SOAP.
Protocols
As a multi-protocol system, the SP itself is oblivious to specific management protocols; each handler provides the implementation of a particular protocol.
SAML2
An implementation exists only for the SAML2 protocol, this implements the dereferencing/resolution steps of the SAML 2.0 HTTP-Artifact binding.
The followingĀ Binding
Ā values are supported:
urn:oasis:names:tc:SAML:2.0:bindings:SOAP
Note that authentication of the request is controlled by theĀ security policy rulesĀ in effect.
Common Attributes
The following may be specified for all protocols and bindings
Name | Type | Default | Description |
---|---|---|---|
LocationĀ | relative path | required | The location of the service (when combined with the base handlerURL). This is the location to which an IdP sends requests to resolve artifacts. |
BindingĀ | UTI | required | Identifies the protocol binding supported by the service. |
indexĀ | unsigned integer | A "tag" that identifies the ACS endpoint so that it can be referenced by other configuration elements or applications. It isĀ stronglyĀ suggested that the values correspond to the values included in the SP'sĀ metadata. |