From @nroy: >We’d like you to develop a new rule and add it to the import stage, to warn about entity descriptors which request either of the two new OASIS SAML subject identifiers, but fail to also use exactly one of the four defined entity attributes to request them as defined in the spec. My response: >This might be pretty horrific as an XSLT check, but it's probably easy in Java. The critical part would be specification: I need to re-read the original text, of course, but one thing that might really help a lot would be a set of litmus tests. > >By that I mean, one or more files with an `<EntityDescriptor>` that should be accepted, and one or more files with an `<EntityDescriptor>` that should be rejected. The more the better, really. Is that something someone could come up with? This issue is a good place to hash out the details.