Multiple entitiIDs on Single SP

[Cantor, Scott]

On 12/6/11 12:43 PM, "Christopher Bongaarts" <cab at umn.edu> wrote:

>On 12/5/2011 9:33 PM, Joshua Brodie wrote:
>
>> 1) Each application, behind a single SP, will individually log in
>> users (login to one application, does not mean access to all)?
>
>Yes, but if the are using the same IdP, the IdP may perform single
>signon (i.e. not prompt for credentials) when the user hits another SP.

Yes, of course, I should have noted that; mentions of logout tend to
overwhelm my brain.

You will end up at the IdP when you cross a boundary, regardless of
whether the applications at the SP are sharing an entityID or not, but
that's not the same as resulting in a prompt.

-- Scott