shibboleth - support for multiple Idp

Kevin Foote kpfoote at uoregon.edu
Tue Dec 2 14:02:39 EST 2014



> On Dec 2, 2014, at 10:46 AM, Ramana Chamarty <rchamart at temple.edu> wrote:
> 
> Does Shibboleth SP be setup to leverage multiple IdP’s. We have a enterprise directory for all university affiliates and some local accounts on the SP. Shibb Idp is working. Not sure who to handle 40 odd local users who are  not in the Idp. Thoughts?

Yes the SP can have any number of IdPs, that is generally the idea of the “federated” auth space :-) 

The Embedded DS [1] is an example of a quick way to boot-strap leveraging multiple IdPs for your SP. Another option is to call the SP’s Session Initiator directly with your desired IdP entityId. This was just discussed a week or so ago on list. 



[1] https://wiki.shibboleth.net/confluence/display/EDS10/Embedded+Discovery+Service

--------
thanks
 kevin.foote



More information about the users mailing list