EDS: modifying idpselect.js

Cantor, Scott cantor.2 at osu.edu
Thu Oct 11 18:38:34 EDT 2012


On 10/11/12 6:36 PM, "Kevin Hall" <hallk at stanford.edu> wrote:
>
>That proposal was on the table but ultimately scrapped. We have an
>existing app which we are switching from our own native authentication
>system to Shibboleth so that we can allow logins from two sister
>organizations. There is a strong desire to minimize the impact to
>current users so we will be using the cookie solution where DS screen is
>only seen once until _saml_idp cookie is deleted/expired.

Just FYI, you can do all that with the SP itself too. There are extra
SessionInitiator handlers that let you read the cookie to dispatch on, or
display a Form to the user. Not much use, but they're there and documented.

That's about the only reason nowadays to create a SessionInitiator chain
by hand like the old config used.

-- Scott




More information about the users mailing list