OpenID authentication context

[Russell Beall]

I wouldn't mind selecting the authentication method at the IdP and having the SP configuration remain unchanged.  Is it possible to have an SP initiate a normal request that ends up at the login.jsp form, but then I have a "Login with OpenID" button that then has the IdP switch to RemoteUser-based authentication?

I see that the SP could tell what authentication type was used by the Shib_Authentication_Method header.

It is likely we will stick to the model of having the SP request the authentication type, because OpenID authentication will only be offered for select SPs and we wouldn't want to confuse the entire campus population with a "Login with OpenID" button on the main page.

Regards,
Russ.

On May 30, 2012, at 12:06 PM, Cantor, Scott wrote:

> I think my opinion is that it's a matter for the IdP to offer this choice
> of authentication, and up to the attributes you assert to give the SP the
> means to distinguish cases, not something you want an SP requesting
> explicitly. Even if I disagree with 800-63 about, well, a lot, I do think