...
- Participant Operational Practices (POP)
- (see comment below)
- Appropriate Contacts in Metadata
- Strawman: Each
<md:EntityDescriptor>
element SHOULD contain both an<md:ContactPerson>
element withcontactType="support"
and an<md:ContactPerson>
element withcontactType="technical"
. The<md:ContactPerson>
elements SHOULD contain at least one<md:EmailAddress>
element. If a contact (either support or technical) is a real person, the<md:givenName>
and<md:surName>
elements SHOULD reflect the person's real name. If a contact is a non-person (such as a mailing list), the<md:givenName>
and<md:surName>
elements SHOULD be omitted. Security Incident Response Policy - (see comment below)
- IdP Terms of Use (targeted at the user)
- (see the Participation Agreement for basic requirements)
- SP Privacy Policy (targeted at the user)
- included in User Interface Elements in SP Metadata
- Attribute Release Policy
...