Default SessionInitiator within a Chaining SessionInitiator
William Spooner
william.spooner at eaglegenomics.com
Fri Oct 12 07:01:54 EDT 2012
Hi,
I have a very simple NativeSPSession configuration, with three IdPs in a Chaining SessionInitiator. The appropriate IdP is selected by a Cookie SessionInitiator;
<SessionInitiator type="Chaining" isDefault="true">
<SessionInitiator type="Cookie" followMultiple="true" />
<SessionInitiator type="SAML2" Location="/Login" entityID="https://idp.foo.com/access" defaultACSIndex="1" />
<SessionInitiator type="SAML2" Location="/Login" entityID="https://idp.bar.org/idp/shibboleth" defaultACSIndex="1" />
<SessionInitiator type="SAML2" Location="/Login" entityID="http://idp.baz.net/adfs/services/trust" defaultACSIndex="1"/>
</SessionInitiator>
This works great when the cookie has been set. With an unset cookie, however, a call to https://www.myapp.com/Shibboleth.sso/Login results in a "None of the configured SessionInitiators handled the request" error. What I can't figure out is how to use the cookie if available, else use a 'default' entity. Is that possible?
Thanks,
Will
More information about the users
mailing list