IdP change relaystate depending on attributes

[Chad La Joie]

No, I don't think we have any features, documented or otherwise, that
allows you to explicitly break SAML compliance.

On 10/27/11 10:59 AM, Joseph Valerio wrote:
> Yeah, that is what I told them. 
> 
> I just wanted to make sure there was not some obscure function that Shib
> provides because this use-case might exists.
> 
> 
> 
> On 10/27/2011 10:55 AM, Chad La Joie wrote:
>> It can not be done, and doing it is a direct violation of the SAML spec.
>>
>> On 10/27/11 10:52 AM, Joseph Valerio wrote:
>>> Hi All,
>>>
>>> I got a request today for our IdP to change the relaystate for a SP
>>> depending on attributes of the user.  I have a cloud vender which we
>>> have 7 instances with, because all of our schools bought individual
>>> lics.  For the short term they want to consolidate to one URL, and until
>>> we migrate the users to the single instance, they want shib to decide
>>> where the user goes.  I know it is better to send the ACS attributes for
>>> it to decide where to send the user, but I don't think that will be an
>>> option.
>>>
>>> A. Can this be done using java-idp-2.3.3?
>>> B. On a scale from 1 - 10 how gross is this.
>>>
>>> Thanks in advance,
>>>
>>> - Joe
>>>
>>> -- 
>>> Joseph Valerio
>>>
>>> Senior Solution Architect
>>>
>>> Yale University
>>> Shared Solution Group
>>> Information Technology Services
>>>
>>> phone: 203-432-1196
>>> email: joseph.valerio at yale.edu
>>> smail: 25 Science Park, New Haven, CT 06511
>>>
>>>
>>> --
>>> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
>> --
>> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
> 
> 
> -- 
> Joseph Valerio
> 
> Senior Solution Architect
> 
> Yale University
> Shared Solution Group
> Information Technology Services
> 
> phone: 203-432-1196
> email: joseph.valerio at yale.edu
> smail: 25 Science Park, New Haven, CT 06511