Different SAML response for different SPs

[Cantor, Scott]

> I need to validate authentication request and send different attributes and
> the SAML response based on the new AttributeVersion tag.
> 
> With standard Shibboleth implementation, is it possible to send different
> responses to different SPs ?

Not based on an extension in a request, no. It would require writing custom filter or resolver code and you would have to examine the AuthnRequest directly by pulling it from the inbound message slot in the request context. I believe it's available in reconstituted form post-login during the resolver and filter operations, but I don't know for sure.

> If so, how do I send different response based on the Authentication request.
> How do I setup my attribute resolver and filter files?

You wite custom plugins, or perhaps a scriptlet.

-- Scott