Shibboleth SP with multiple IdPs

[Cantor, Scott]

On 7/22/14, 9:41 AM, "Peter Schober" <peter.schober at univie.ac.at> wrote:

>* ltartarini90 <ltartarini90 at gmail.com> [2014-07-22 15:25]:
>> For instance: <Attribute
>> name="https://example.org/myAttributes/FavoriteFruit" id="favFruit"/>,
>>both
>> IdPs have this attribute and the id="..." is the same for each IdP. I
>>would
>> like to know if it is possible to have different id for each IdP for the
>> same attribute.
>
>Why?  Why would you standardize attributes (names, content, meaning)
>when you want to treat them differently depending on the IDP?
>
>You always have the identity of the IDP available as part of the
>session (Shib-IdP-Provider envvar, by default), why would you want to
>overload each individual attribute with an identifier for the IDP?

And for the record, no, you can't map attributes differently based on the
IdP, not without separating resource URLs so that the requests themselves
are different.

-- Scott