From 1806ad9ff3c5f437499c7e89b8cf5a94eb4aae80 Mon Sep 17 00:00:00 2001
From: Ian Young <ian@iay.org.uk>
Date: Wed, 14 Jun 2017 16:39:04 +0100
Subject: [PATCH] Add HTTP-Artifact SSO binding to check_bindings

Bug fix: this binding is permitted by the spec, but rarely if ever used.
See ukf/ukf-meta#130.
---
 mdx/_rules/check_bindings.xsl | 1 +
 1 file changed, 1 insertion(+)

diff --git a/mdx/_rules/check_bindings.xsl b/mdx/_rules/check_bindings.xsl
index cd05f0d4..7b2d0163 100644
--- a/mdx/_rules/check_bindings.xsl
+++ b/mdx/_rules/check_bindings.xsl
@@ -131,6 +131,7 @@
 	
 	<xsl:template match="md:SingleSignOnService
 		[@Binding != 'urn:mace:shibboleth:1.0:profiles:AuthnRequest']
+		[@Binding != 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact']
 		[@Binding != 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST']
 		[@Binding != 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign']
 		[@Binding != 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect']