saml:IDP: Add saml:AllowCreate to state array.

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@2780 44740490-163a-0410-bde0-09ae8108e29a

modules/saml/lib/IdP/SAML2.php

@@ -257,6 +257,7 @@ class sspmod_saml_IdP_SAML2 {
 			$consumerURL = NULL;
 			$consumerIndex = NULL;
 			$extensions = NULL;
+			$allowCreate = TRUE;
 
 			SimpleSAML_Logger::info('SAML2.0 - IdP.SSOService: IdP initiated authentication: '. var_export($spEntityId, TRUE));
 
@@ -297,6 +298,12 @@ class sspmod_saml_IdP_SAML2 {
 			} else {
 				$nameIDFormat = NULL;
 			}
+			if (isset($nameIdPolicy['AllowCreate'])) {
+				$allowCreate = $nameIdPolicy['AllowCreate'];
+			} else {
+				$allowCreate = FALSE;
+			}
+
 			SimpleSAML_Logger::info('SAML2.0 - IdP.SSOService: Incomming Authentication request: '. var_export($spEntityId, TRUE));
 		}
 
@@ -337,6 +344,7 @@ class sspmod_saml_IdP_SAML2 {
 			'saml:ConsumerURL' => $acsEndpoint['Location'],
 			'saml:Binding' => $acsEndpoint['Binding'],
 			'saml:NameIDFormat' => $nameIDFormat,
+			'saml:AllowCreate' => $allowCreate,
 			'saml:Extensions' => $extensions,
 		);