Using Different SecurityPolicy for different SP's?

[Zmuda, Matthew R]

Thinking about this a little more and what my options might be.. what if I write a custom Security Rule for the existing Security Policy which has some logic to check the request and only require the request to be signed on non unsolicited SSO requests. That should allow me to use Unsolicited SSO without impacting existing RP config so they would still have send signed requests.

Thoughts on that?

Thanks,

-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: Monday, December 17, 2012 2:14 PM
To: Shib Users
Subject: Re: Using Different SecurityPolicy for different SP's?

On 12/17/12 2:00 PM, "Zmuda, Matthew R" <Matthew.R.Zmuda at td.com> wrote:
>
>So all SP's I support with my IDP must follow the same Security Policies?

Actually I was referring more to things like specifying signing and encryption algorithms. I believe SecurityPolicy itself can already be designated on a per-profile handler basis by overriding the securityPolicyRef attribute.

-- Scott


--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net

NOTICE: Confidential message which may be privileged. Unauthorized use/disclosure prohibited. If received in error, please go to www.td.com/legal for instructions.
AVIS : Message confidentiel dont le contenu peut être privilégié. Utilisation/divulgation interdites sans permission. Si reçu par erreur, prière d'aller au www.td.com/francais/avis_juridique pour des instructions.