...
2.3 Name Identifiers (Paul Madsen - paulmadsen@rogers.com)
[What should be CONFIRMED through testing from this section?]The tests will confirm that IdP and SP properly implement support for the Name Identifier formats of
- urn:oasis:names:tc:SAML:2.0:nameid-format:transient
- urn:oasis:names:tc:SAML:2.0:nameid-format:persistent
Such support will consiste of proper handling of the
- AuthnRequest's NameIDPolicy
- NameID in the returned Response.
PaulM: The existing SAML test plan 3.2.2 would appear to cover the necessary tests for 'persisten', but testing for 'transient' is far more limited, ie only in Test Case J and only in the case of an unsolicited Response. Should this be more symmetrical?
NB the SAML eGov 1.5 profile, in addition to defining name identifier formats of transient and persistent as MTI, also defined 'unspecified' as MTI. The corresponding tests in the SAML test plan 3.2.2 need be removed/softened.
2.4 Attributes (Denny Prvu - Denny.Prvu@ca.com)
...