From 9ae18261fbbeda4682b7acff5b6c822fdca7f6b2 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Cl=C3=A9ment=20Oudot?= <clement@oodo.net>
Date: Thu, 21 Oct 2010 14:38:56 +0000
Subject: [PATCH] SOAP binding should not be the first SSO binding in IDP SAML
 metadata

---
 .../example/skins/common/saml2-metadata.tpl                 | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/modules/lemonldap-ng-portal/example/skins/common/saml2-metadata.tpl b/modules/lemonldap-ng-portal/example/skins/common/saml2-metadata.tpl
index b2e34a18d..3f2315758 100644
--- a/modules/lemonldap-ng-portal/example/skins/common/saml2-metadata.tpl
+++ b/modules/lemonldap-ng-portal/example/skins/common/saml2-metadata.tpl
@@ -37,9 +37,6 @@
       <TMPL_IF NAME="samlIDPSSODescriptorSingleLogoutServiceHTTPPostResponseLocation">
       ResponseLocation="<TMPL_VAR NAME="samlIDPSSODescriptorSingleLogoutServiceHTTPPostResponseLocation">"
       </TMPL_IF>/>
-    <SingleSignOnService
-      Binding="<TMPL_VAR NAME="samlIDPSSODescriptorSingleSignOnServiceSOAPBinding">"
-      Location="<TMPL_VAR NAME="samlIDPSSODescriptorSingleSignOnServiceSOAPLocation">" />
     <SingleSignOnService
       Binding="<TMPL_VAR NAME="samlIDPSSODescriptorSingleSignOnServiceHTTPRedirectBinding">"
       Location="<TMPL_VAR NAME="samlIDPSSODescriptorSingleSignOnServiceHTTPRedirectLocation">"
@@ -58,6 +55,9 @@
       <TMPL_IF NAME="samlIDPSSODescriptorSingleSignOnServiceHTTPArtifactResponseLocation">
       ResponseLocation="<TMPL_VAR NAME="samlIDPSSODescriptorSingleSignOnServiceHTTPArtifactResponseLocation">"
       </TMPL_IF>/>
+    <SingleSignOnService
+      Binding="<TMPL_VAR NAME="samlIDPSSODescriptorSingleSignOnServiceSOAPBinding">"
+      Location="<TMPL_VAR NAME="samlIDPSSODescriptorSingleSignOnServiceSOAPLocation">" />
     <NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress</NameIDFormat>
     <NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName</NameIDFormat>
     <NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:WindowsDomainQualifiedName</NameIDFormat>