Pass dynamic properties from SP to IdP?

Cantor, Scott cantor.2 at osu.edu
Tue Sep 3 15:04:36 EDT 2013


On 9/3/13 2:59 PM, "Jacob Lundberg" <jacob at collegenet.com> wrote:
>
>Skinning the login page differently depending on what application (or
>sub-application) of the SP is making the request would be one reason.

If you need different behavior per app, you should assign it a separate
entityID. It's just not worth creating two levels of classification, we
tried that originally and it failed for all sorts of reasons.

But in fact you can even simulate the notion of multiple apps as it is, by
using different AttributeConsumingService descriptors in metadata and then
referencing them in the AuthnRequest.

-- Scott




More information about the users mailing list