a use case single domain

[Cantor, Scott]

On 1/18/13 7:12 AM, "ci_98yr" <ci_98yr at yahoo.com> wrote:

>Thanks a bunch Peter.
>
>As a follow up Q: I guess my userid q pertains to "persistent/transient"
>federation id at both idp and sp
>As per my understanding (correct me if wrong), the federation id is used
>to
>map local userids, for example same user on one system/app might go with
>different userid on other. Assume that the two systems have saml sp
>interfaces and talking to a predetermined idp.

None of that pertains to the number of DNS domains. SPs are identified by
entityID, which is a name. Transient IDs are never used to identify
people, only sessions. Persistent IDs are non-correlatable across SPs by
design. If you have a different use case, as most are, you want a
different NameID format or attribute to carry information.

-- Scott