Separating multiple authn methods on SP

[Cantor, Scott]

On 7/6/12 1:15 PM, "Christopher Bongaarts" <cab at umn.edu> wrote:
>
>What is the simplest way to get that "upgrade" functionality to work?

There isn't really a simple way, the SP doesn't handle step-up
particularly well. This is the kind of area that I think demands
application involvement to handle well.

> 
>It seems like having separate ApplicationOverrides for the SuperToken
>URLs should do the trick, but will the handler URL get in the way of
>sharing a common application for /foo/bar and /quux?

If it's sufficient for your needs, no, it won't get in your way. The
requirement is that the handlerURL map to the applicationId. You can have
any resources you want mapped to that same applicationId, there doesn't
have to be an overlap between the handler and the resources, other than
the cookie. Of course, the cookie will have to be whole-host, so you have
so separation there.

-- Scott