Multiple entitiIDs on Single SP

[Cantor, Scott]

On 12/5/11 10:33 PM, "Joshua Brodie" <josbrodie at gmail.com> wrote:
>
>1) Each application, behind a single SP, will individually log in
>users (login to one application, does not mean access to all)?

If by application you mean a boundary you make visible to the SP with the
override feature, yes. It doesn't know about web applications unless you
define them with separately mapped applicationId settings.

>2) Logout for each application, behind an SP, is unique to the
>application (not one logout for all the applications).

A local logout, yes. A SAML logout is supposed to affect any sessions its
instructed to, but there are bugs in that feature that cause problems when
multiple applications are involved anyway.

But I don't know what you think a local logout means. That has no useful
purpose unless you control the IdP and it isn't doing SSO.

-- Scott