From 71bfb59cac5b6fdef61a5728ef45946eb5fcdc54 Mon Sep 17 00:00:00 2001
From: Ian Young <ian@iay.org.uk>
Date: Wed, 14 Jun 2017 15:47:58 +0100
Subject: [PATCH] Add AD FS SSO binding to check_bindings

Make check_bindings consistent with check_adfs.
See ukf/ukf-meta#131.
---
 mdx/_rules/check_bindings.xsl | 1 +
 1 file changed, 1 insertion(+)

diff --git a/mdx/_rules/check_bindings.xsl b/mdx/_rules/check_bindings.xsl
index 2525981a..cd05f0d4 100644
--- a/mdx/_rules/check_bindings.xsl
+++ b/mdx/_rules/check_bindings.xsl
@@ -136,6 +136,7 @@
 		[@Binding != 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect']
 		[@Binding != 'urn:oasis:names:tc:SAML:2.0:bindings:SOAP']
 		[@Binding != 'urn:oasis:names:tc:SAML:2.0:profiles:holder-of-key:SSO:browser']
+		[@Binding != 'http://schemas.xmlsoap.org/ws/2003/07/secext']
 		">
 		<xsl:call-template name="error">
 			<xsl:with-param name="m">