From 9970b9e92fe70c2cf65a8100ee03520dd8bcc56d Mon Sep 17 00:00:00 2001
From: Ian Young <ian@iay.org.uk>
Date: Thu, 14 Jun 2012 13:48:27 +0000
Subject: [PATCH] Bug 926 - add bindings check for AssertionIDRequestService
 element

---
 mdx/check_bindings.xsl | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

diff --git a/mdx/check_bindings.xsl b/mdx/check_bindings.xsl
index 0ce452ea..2da6b2e8 100644
--- a/mdx/check_bindings.xsl
+++ b/mdx/check_bindings.xsl
@@ -52,6 +52,20 @@
 		</xsl:call-template>
 	</xsl:template>
 	
+	<xsl:template match="md:AssertionIDRequestService
+		[@Binding != 'urn:oasis:names:tc:SAML:2.0:bindings:SOAP']
+		[@Binding != 'urn:oasis:names:tc:SAML:2.0:bindings:URI']
+		">
+		<xsl:call-template name="error">
+			<xsl:with-param name="m">
+				<xsl:text>invalid binding '</xsl:text>
+				<xsl:value-of select="@Binding"/>
+				<xsl:text>' on </xsl:text>
+				<xsl:value-of select="name()"/>
+			</xsl:with-param>
+		</xsl:call-template>
+	</xsl:template>
+
 	<xsl:template match="md:AttributeService
 		[@Binding != 'urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding']
 		[@Binding != 'urn:oasis:names:tc:SAML:2.0:bindings:SOAP']
@@ -140,6 +154,7 @@
 		[@Binding]
 		[local-name() != 'ArtifactResolutionService']
 		[local-name() != 'AssertionConsumerService']
+		[local-name() != 'AssertionIDRequestService']
 		[local-name() != 'AttributeService']
 		[local-name() != 'ManageNameIDService']
 		[local-name() != 'NameIDMappingService']