RE: [security-services] AssertionConsumerServiceIndex vs. AssertionConsumerURL

> A final question -
> 
> When both attributes are present which one should be used? 
> Is this an error case?

Yeah, I would think so, we should nail that down. We could use elements and
make it a choice as well, I didn't do that originally mainly because the
names were so long, and using the element doubles it.

-- Scott