single sp and multiple sessions

[Cantor, Scott]

On 9/27/13 4:39 AM, "Ulrich Leodolter" <ulrich.leodolter at obvsg.at> wrote:

>single SP and Apache running on one host my.domain.
>two protected locations /shib/A and /shib/B which
>require session with different IdP (IdP-A and IdP-B).
>the SP has configured only the default application.

One application means one session "scope", by definition.

>when i open https://my.domain/shib/A i am redirected
>to login at IdP-A and login works as expected.
>
>but when i open https://my.domain/shib/B in new browser tab
>i am not forced to login at IdP-B,  the existing session from
>IdP-A is accepted.  i only managed to deny access using
>apache rules (Require shib-attr ...).

That's expected.

>is it possible to have one SP session for each path from a single
>client(browser) when using this setup?

Not without separate applications via override.

-- Scott