Limitations

  • WSS authentication does not check if the request contains SAML 1.1 or SAML 2.0 version.
  • WSS authentication validates the request only if the SAML assertion is valid but does not enforce a specific SAML version or issuer on the request.