Understanding flow / federation
Peter Schober
peter.schober at univie.ac.at
Mon Sep 24 04:02:21 EDT 2012
* Bo Lorentsen <bl at moch.dk> [2012-09-24 09:08]:
> I end up in the
> https://wiki.shibboleth.net/confluence/display/SHIB2/IdPRelyingParty,
> but find it difficult to put this into the right perspective. Where do
> the metadata from the other idP be placed and what is the flow, from a
> SP to my idP and how is auth method selected in the idP.
As discussed, the IdP doesn't care about other IdPs. Some (many?) even
filter out any IdPs from metadata at the IdP side.
So you add metadata for any SPs (and/or IdPs, even though they will be
ignored by the IdP) to one or more metadata instances and let the IdP
know about these.
-peter
More information about the users
mailing list