Pass dynamic properties from SP to IdP

[Cantor, Scott]

On 9/3/13 3:16 PM, "Jacob Lundberg" <jacob at collegenet.com> wrote:

>We have somewhere on the order of twelve thousand sub-applications and
>new ones come or old ones go constantly. I hate to imagine what life
>would be like for our shibboleth administrators if we had to modify the
>configuration for each of them.  I am sure we have seen some of your
>original problems but I think what we have now is a better solution to
>our problem than what you suggest.

I'm not sure I understand the solution. Unless you use an AuthnRequest
extension, there's no way to pass anything about the application to the
IdP that wouldn't be invalid or ignored before it reached a place where it
would be understood.

-- Scott