Alternate SSO URL for SP
Cantor, Scott
cantor.2 at osu.edu
Fri Jun 8 14:18:40 BST 2012
On 6/8/12 6:36 AM, "a.flanagan at surrey.ac.uk" <a.flanagan at surrey.ac.uk>
wrote:
>Can we provide this alternate SSO URL using a <SessionInitiator> in the
>shibboleth2.xml file on our VLE, or must the SSO URL be provided within
>the IdP metadata?
Not really, notwithstanding that I don't really yet understand what you're
trying to do.
The SP only knows what IdP to use. That's the only thing you can give to
initiate a session, and from there it looks up the entity, chooses the
bindings you configure it with (it usually just defaults that) and finds
the SSO URL to use. There is no option to give it a location to use.
That's what metadata is for.
If you want different SPs to interact with a single entityID at different
locations, you would in general have to supply them with different
metadata.
-- Scott
More information about the users
mailing list