Use a specific IDP based on resource request query string

[Cantor, Scott]

On 4/25/12 11:50 AM, "Simon Bright" <simon.bright at e2bn.org> wrote:
>
>I'd like to use the Request Mapper to take this url and route the request
>to the appropriate idp entity ID based on the friendlyIdpname part ,
>either directly or via a named dedicated session initiator within the
>shibboleth2.xml file
>
>Can I somehow use the Query Name function within the request mapper to do
>this , by linking a requireSessionWith (sessioninitiator) or by otherwise
>declaring the idp entity id to use.

Peter's suggestion(s) were the better option, but yes, I think you could
rely on the Query element in the mapper to assign the entityID for the
request.

It *might* work if you apply that Query match to the handler path itself,
but I've never tried it.

requireSessionWith is a completely different feature, and that is much
more complex to use, requiring a complete SessionInitiator chain expanded
out for each entity involved. It's all but deprecated now.

>Can you help by  commenting if this is posible and if so how the Query
>Name part should be located and configured within  the Request Mapper e.g
>does it go in the Access Control Part or outside it.

It has nothing to do with AccessControl. The wiki describes the exact
order of elements in each parent element's documentation. Or you can look
at the schema, but if you don't know XSD, that's why the wiki
documentation is so exhaustive on each element.

-- Scott