AuthnRequestsSigned

Takes a value of true or false. If true, the service provider will sign all outgoing authentication requests.

WantAssertionsSigned

Takes a value of true or false. If true, all assertions received by this service provider must be signed.

SingleLogoutService

Defines the endpoint(s) that support the Single Logout profiles. 

ManageNameIDService

Defines the endpoint(s) that support the Name Identifier Management profiles. 

NameIDFormat

Defines the name identifier formats supported by the service provider. Name identifiers are a way for providers to communicate with each other regarding a user. Single sign-on interactions support two types of identifiers: 

• A persistent identifier is saved to a particular user's data store entry as the value of two attributes.

• A transient identifier is temporary and no data will be written to the user's persistent data store.

More information about name identifiers is in Single Sign-on.

AssertionConsumerService

Defines the endpoint(s) that support the profiles of the Authentication Request protocol. All service providers support at least one such endpoint.