shibboleth - support for multiple Idp

[Cantor, Scott]

On 12/2/14, 6:46 PM, "Ramana Chamarty" <rchamart at temple.edu> wrote:



>Does Shibboleth SP be setup to leverage multiple IdP’s. We have a 
>enterprise directory for all university affiliates and some local 
>accounts on the SP. Shibb Idp is working. Not sure who to handle 40 odd 
>local users who are  not in the Idp. Thoughts?

Well, you're presupposing that you have an IdP for those users. The SP has 
no intrinsic understanding of anything but IdPs. If you want to use local 
accounts, then you have to build that into the application.

Regardless, you now have to provide a discovery UI of some form, because 
picking "local" is the same as picking an IdP, whether it's really an IdP 
or not.

-- Scott