...
PaulM: The existing SAML test plan 3.2.2 would appear to cover the necessary tests for 'persistenpersistent', but testing for 'transient' is far more limited, ie only in Test Case J and only in the case of an unsolicited Response. Should this be more symmetrical?
...