Google Apps SSO with multiple IDPs

[Cantor, Scott]

> My vision is that users can sign into the portal and
> use any SP but for users who only want to use Google Apps they
> authenticate using a dedicated IDP.  The easy solution is to do away with the
> dedicated IDP and only use the portal IDP but that is not an option for other
> reasons.  Any thoughts or suggestions would be appreciated.

Could you explain why it's not an option? I ask because somebody at OSU has the mistaken impression that something similar to this is a sensible idea, let alone a "not terrible" one, which it of course is. Just wondering if some sort of strange misinformation is going around.

-- Scott