Using keycloak-1.9.0.Final only the HTTP-POST and HTTP-Redirect bindings
are advertised in the IdP Metadata for SingleSignOnService.
The SOAP SingleSignOnService was added when it was discovered to be
missing in the 1.8 cycle, or so I thought. Did it get added in a
different release or did it get lost somehow?
Anyway, it's really important. SAML ECP won't work unless you advertise
support for it.
--
John