Alternate SSO URL for SP

[Ian Young]

On 8 Jun 2012, at 12:14, <a.flanagan at surrey.ac.uk> wrote:

> A thought had crossed my mind that if we had 2 endpoints (or the need for two entity Ids or  metadata URLs) then this would cause a problem in terms of being recognised across the federation.

Two SSO endpoints at the IdP doesn't sound like it should be a problem, as long as the IdP software you're using can do that (I'm not personally familiar with it).  The endpoint you choose to advertise in federation metadata would be the generic one rather than the special one, of course.

I wouldn't suggest going down the multiple entity ID route for your IdP if you can avoid it.

	-- Ian



-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20120608/a1aa2faf/attachment-0001.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4813 bytes
Desc: not available
Url : http://shibboleth.net/pipermail/users/attachments/20120608/a1aa2faf/attachment-0001.bin