Multiple Services on One SP

[Michael A Grady]

On Jan 22, 2013, at 10:32 AM, Cantor, Scott wrote:

> On 1/22/13 10:53 AM, "Paul Hethmon" <paul.hethmon at clareitysecurity.com>
> wrote:
> 
>> Ok, that makes more sense. I think you could, but you would have to write
>> a custom resolver to do so. Just doing a quick check looks like the
>> complete SAML request message would be available at that level.
> 
> You can, but the point is, who will? If you control the IdP, then yes. If
> you're asking other IdPs, particularly at scale, to do so, you won't get
> far as an SP.

Yes, I was interpreting (perhaps mistakenly) the context of the original question to being how to get a particular IdP to interact with a particular SP. (Actually, my initial interpretation was that the poster controlled the SP, and could change how it worked. Which was incorrect.) If this is an SP trying to get a bunch of IdPs to change how they work, then that does sound like an approach that will not scale. In that case, the SP really does need to change, and use RelayState and not custom attributes, or multiple endpoints, one per app.

> 
> So it depends on the use case.
> 
> -- Scott
> 
> 
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net


--
Michael A. Grady
Senior IAM Consultant, Unicon, Inc.