IdP change relaystate depending on attributes

[Chad La Joie]

It can not be done, and doing it is a direct violation of the SAML spec.

On 10/27/11 10:52 AM, Joseph Valerio wrote:
> Hi All,
> 
> I got a request today for our IdP to change the relaystate for a SP
> depending on attributes of the user.  I have a cloud vender which we
> have 7 instances with, because all of our schools bought individual
> lics.  For the short term they want to consolidate to one URL, and until
> we migrate the users to the single instance, they want shib to decide
> where the user goes.  I know it is better to send the ACS attributes for
> it to decide where to send the user, but I don't think that will be an
> option.
> 
> A. Can this be done using java-idp-2.3.3?
> B. On a scale from 1 - 10 how gross is this.
> 
> Thanks in advance,
> 
> - Joe
> 
> -- 
> Joseph Valerio
> 
> Senior Solution Architect
> 
> Yale University
> Shared Solution Group
> Information Technology Services
> 
> phone: 203-432-1196
> email: joseph.valerio at yale.edu
> smail: 25 Science Park, New Haven, CT 06511
> 
> 
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net