IdP change relaystate depending on attributes

[Joseph Valerio]

Yeah, that is what I told them.

I just wanted to make sure there was not some obscure function that Shib 
provides because this use-case might exists.



On 10/27/2011 10:55 AM, Chad La Joie wrote:
> It can not be done, and doing it is a direct violation of the SAML spec.
>
> On 10/27/11 10:52 AM, Joseph Valerio wrote:
>> Hi All,
>>
>> I got a request today for our IdP to change the relaystate for a SP
>> depending on attributes of the user.  I have a cloud vender which we
>> have 7 instances with, because all of our schools bought individual
>> lics.  For the short term they want to consolidate to one URL, and until
>> we migrate the users to the single instance, they want shib to decide
>> where the user goes.  I know it is better to send the ACS attributes for
>> it to decide where to send the user, but I don't think that will be an
>> option.
>>
>> A. Can this be done using java-idp-2.3.3?
>> B. On a scale from 1 - 10 how gross is this.
>>
>> Thanks in advance,
>>
>> - Joe
>>
>> -- 
>> Joseph Valerio
>>
>> Senior Solution Architect
>>
>> Yale University
>> Shared Solution Group
>> Information Technology Services
>>
>> phone: 203-432-1196
>> email: joseph.valerio at yale.edu
>> smail: 25 Science Park, New Haven, CT 06511
>>
>>
>> --
>> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net


-- 
Joseph Valerio

Senior Solution Architect

Yale University
Shared Solution Group
Information Technology Services

phone: 203-432-1196
email: joseph.valerio at yale.edu
smail: 25 Science Park, New Haven, CT 06511
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20111027/b95296b2/attachment.html