SSO Implementation

[Cantor, Scott]

>
>Please help me out in the process of SAML SP implementation for sub
>domains. This implementation little bit tricky here single application
>providing the solutions or our clients using the sub domains so each sub
>domain indicates the individual client and
> also each client had the his own idp and sp but we want to integrate
>their idp into our sp at the same it has to redirect the request to
>respected sub domains (clients) idp. Here Session of each and every sub
>domain (client) should be vary based on the sub
> domain(client) idp.

I answered this in the original thread you raised it in. If you want to
specify the IdP based on the vhost, you add an entityID property naming
the IdP in the RequestMap in a <Host> element for the given vhost. That's
it. You don't need overrides.

If you need to add restrictions to limit which IdP's users are able to
access the vhosts, then there are various ways to achieve that, or it can
be done entirely inside the application. Again, you don't need overrides
for that.

-- Scott