Redirect to Shib SP for specific entityID

[Brandon Montgomery]

I'm integrating single sign on into a multi-tenant application. Each 
tenant may or may not be utilizing single sign on. I need to redirect 
non-authenticated users who are using SSO to the /Shibboleth.sso/Login 
page using a configured entityID, which I will know. I understand that I 
would redirect them to 
/Shibboleth.sso/Login?entityID=https://sso.org.edu/ (properly 
URL-encoded, of course).

I have the basic Shib SP system working on IIS with the ISAPI filter, 
and it works with the Test Shib site right now. However, I noticed that 
I had to put a page within the "secure" folder (which is a config 
setting) in order for the ISAPI filter to properly add the attributes 
extracted from the SSO session and place those in the headers of the 
request (ASP .NET).

What I need is for the ISAPI filter to always add that session 
information to the request no matter where in the IIS directory 
structure the user is. Instead of just adding the session information 
for the /secure directory, I want it to add it to anything under the 
root directory.

The other thing is that I need the Shib session to be optional within 
this directory so that users who are not using SSO can still log in to 
the application using other means.

How can I accomplish this? Thanks for any help you can provide.

-- 
Sincerely,

Brandon Montgomery
Director of Engineering
TeamDynamix
o: 877.752.6196 x114
m: 614.285.7596