Limited Single Sign On?

[Cantor, Scott]

On 9/10/13 6:38 PM, "Luo, Pan" <pan.luo at ubc.ca> wrote:

>With ForceAuth off, we can do single sign on. Is it possible we can limit
>only allow session from certain app to single sign on? For example:
>
>We have appA and appB, both enabled shib and appB has ForceAuth off. Can
>I limit only users logged into appA is allowed to single sign on on appB?
>Thanks.

No, at least certainly not without extending code and likely by turning
off existing SSO code and installing something different in a custom login
handler.

-- Scott