IDP-initiaded SSO or IdPUnsolicitedSSO

[Cantor, Scott]

On 10/17/13 4:25 PM, "Jehan Procaccia" <Jehan.Procaccia at it-sudparis.eu>
wrote:

>following your recommendations, I created a custom NameID for that
>vendor, 
>but I still cannot figure out how to use a "precedence capability" to
>ensure that for that vendor, it is that custom NameID that is released

I don't believe you can (and would not in general think you should be able
to) set precedence based on "unspecified".

If you must use that (which is silly), you can probably only control that
by explicit control over attribute release to prevent more than one
possible candidate from being considered.

-- Scott