Alternate SSO URL for SP

Cantor, Scott cantor.2 at osu.edu
Fri Jun 8 14:18:40 BST 2012


On 6/8/12 6:36 AM, "a.flanagan at surrey.ac.uk" <a.flanagan at surrey.ac.uk>
wrote:

>Can we provide this alternate SSO URL using a <SessionInitiator> in the
>shibboleth2.xml file on our VLE, or must the SSO URL be provided within
>the IdP metadata?

Not really, notwithstanding that I don't really yet understand what you're
trying to do.

The SP only knows what IdP to use. That's the only thing you can give to
initiate a session, and from there it looks up the entity, chooses the
bindings you configure it with (it usually just defaults that) and finds
the SSO URL to use. There is no option to give it a location to use.
That's what metadata is for.

If you want different SPs to interact with a single entityID at different
locations, you would in general have to supply them with different
metadata.

-- Scott



More information about the users mailing list