Alternate SSO URL for SP
Ian Young
ian at iay.org.uk
Fri Jun 8 12:01:09 BST 2012
On 8 Jun 2012, at 11:36, <a.flanagan at surrey.ac.uk> wrote:
> Can we provide this alternate SSO URL using a <SessionInitiator> in the shibboleth2.xml file on our VLE,
Yes (Chad had the details).
> or must the SSO URL be provided within the IdP metadata?
I am fairly sure the IdP SSO URLs that you configure into the SP's SessionInitiators do not need to appear in the IdP's metadata.
In addition, think I recall that we verify that the IdP only has one SSO endpoint for any given binding, so that discovery services aren't going to get confused. So, we wouldn't accept registration of additional ones (for the same binding) anyway.
-- Ian
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20120608/b9427f4b/attachment.html
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4813 bytes
Desc: not available
Url : http://shibboleth.net/pipermail/users/attachments/20120608/b9427f4b/attachment.bin
More information about the users
mailing list