Shibboleth Service Provider Configuration for Single app for multiple sub domains with Different IDP's
Cantor, Scott
cantor.2 at osu.edu
Sat Oct 27 17:34:13 EDT 2012
On 10/27/12 5:27 PM, "Raz's" <gajula.rajashekhar at gmail.com> wrote:
>
>So can you suggest me other alternative(with any slightly modification
>wrt you view) to fulfill my requirement.
The best option is not to try and avoid discovery. That's a cost of
supporting federation, and users should interact with the system to select
their IdP.
The second best option is to use path or query string information to
trigger the IdP selection instead of the hostname, but route all traffic
back through the same URLs and resources. If the system has to be
compartmentalized by IdP, that should be done by the application itself
based on the data that is available for the authenticated session.
-- Scott
More information about the users
mailing list