delegated authentication without specifying SPs in advance

[Cantor, Scott]

On 8/22/11 10:12 AM, "Yana Panchenko" <yana_panchenko at yahoo.com> wrote:
>As far as understood, for this to work, at IdP side it must be
>explicitely configured which SPs are allowed to delegate to which SPs.

Yes, that appears to be a limitation of the configuration of the extension
code.

> But we want our SP1 to
> call any other service without restrictions on the entities called,
>because we may not know in advance all participating SPs from other
>organizations. Is it possible with Shibboleth?

Not without changing the code.

-- Scott