Alternate SSO URL for SP

Cantor, Scott cantor.2 at osu.edu
Fri Jun 8 14:45:31 BST 2012


On 6/8/12 9:41 AM, "Ian Young" <ian at iay.org.uk> wrote:
>
>I guess I was engaging in some sloppy thinking; it's possible to use
>arbitrary URLs as long as you're talking about SAML 1.1 and the
>Shibboleth authentication request but not if you're using SAML 2.0.

I guess that's true, yes.

>Just to clarify this a little, what it sounds like you'd want in this
>case is for the VLE to be fed with custom metadata for the IdP so that it
>would use a different SSO location.

Yes. Or you could approximate something, with SAML 2, by using Redirect
for one of the cases and POST in the other, and then manipulate one
SessionInitiator with a custom outgoingBindings property that favors POST.
But that's not the kind of thing you want to use to customize the
appearance of a login.

-- Scott



More information about the users mailing list