Is it possible do different authentication based on different SP?

Cantor, Scott cantor.2 at
Thu Aug 16 20:17:21 EDT 2012

On 8/16/12 7:58 PM, "Cantor, Scott" <cantor.2 at> wrote:
>No. What I said was that you have to use different context classes to
>indicate which handler you want. That doesn't mean using the same context
>class, it means using different ones. You have to make up the two classes
>to use.

I think your confusion is that you think the only allowable context
classes are the ones defined by the standard which are technology signals
like "password". That isn't limited, you can define any context class you
want by creating a URI for it and defining the meaning. The only thing
connecting the built-in "password" class and the UsernamePassword handler
in the IdP is you putting the string into the file. Pick your own URIs and
you can do anything you want with them.

-- Scott

More information about the users mailing list