Use a specific IDP based on resource request query string

[Simon Bright]

Hi 

We have a fairly standard SP set up. The /secure folder on the SP is protected. We use the request mapper functionality to require a session and have Access Contorl rules that allow certain affiliated scope regexes only. 

We are currently configuring our web page(s) with logo'd IDP buttons for different providers and these buttons are coded with session initiiator urls see example below. 

https://passport.e2bn.org/Shibboleth.sso/Login?entityID=https://shibboleth-idp.webbased.co.uk/idp/shibboleth&target=https://passport.e2bn.org/secure .... etc 

These work fine but are not very user friendly if we want to tell other users how to build a button to get to our content from their own portal/web pages via SSO. 

What I'd like to do is make the coding for the urls more elegant for example 

https://passport.e2bn.org/secure/target/?idp=friendlyIdpname 

I'd like to use the Request Mapper to take this url and route the request to the appropriate idp entity ID based on the friendlyIdpname part , either directly or via a named dedicated session initiator within the shibboleth2.xml file 

Can I somehow use the Query Name function within the request mapper to do this , by linking a requireSessionWith (sessioninitiator) or by otherwise declaring the idp entity id to use. 

The Request Mapper documentation seems to suggest this but I cannot find any examples. 

Can you help by commenting if this is posible and if so how the Query Name part should be located and configured within the Request Mapper e.g does it go in the Access Control Part or outside it. 




Regards 

Simon Bright 
Technical Services Manager 
E2BN 
01462 834588 
07912 853 107 
www.e2bn.org 




-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20120425/c3195579/attachment.html