Associating SP users with specific IdPs

[Peter Schober]

* Robert Lowe <robertmlowe at rmlowe.com> [2013-03-25 11:43]:
> > > Okay, from my reading of the spec I understand that both
> > > NameQualifier and SPNameQualifier are optional. I also get the
> > > impression that they are rarely used—that is, I don't believe I
> > > have ever seem them used either in examples/documentation, or
> > > “in the wild.”
> >
> > Well, besides those being used (like Tom said), the software can infer
> > both values from the protocol messages in the sinple case where all
> > qualifiers have their default values (NQ = IdP; SPNQ = SP).
> 
> By “the software” you mean the SP rather than the application,
> right?

Yes

> Does that happen automatically or is some configuration needed?

defaultQualifiers defaults to "false", can be enabled by setting to "true":
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPAttributeDecoder#NativeSPAttributeDecoder-NameIDAttributeDecoder
-peter