single sp and multiple sessions

Ulrich Leodolter ulrich.leodolter at obvsg.at
Fri Sep 27 04:39:20 EDT 2013


hi,

assume the following setup:

single SP and Apache running on one host my.domain.
two protected locations /shib/A and /shib/B which
require session with different IdP (IdP-A and IdP-B).
the SP has configured only the default application.

when i open https://my.domain/shib/A i am redirected
to login at IdP-A and login works as expected.

but when i open https://my.domain/shib/B in new browser tab
i am not forced to login at IdP-B,  the existing session from
IdP-A is accepted.  i only managed to deny access using
apache rules (Require shib-attr ...).

question:

is it possible to have one SP session for each path from a single
client(browser) when using this setup?


Thanks!
Ulrich




More information about the users mailing list