Shibboleth IDP trust with other IDP

[Cantor, Scott]

On 3/9/14, 5:56 AM, "krrishv" <krish.v at gmail.com> wrote:

>So below is that I am trying to do from my IDP1 .
>
>1) post back URL
>https://server1/Shibboleth.sso/SAML2/POST
>
>Relay state is sp in server 2
>Http://server2/secure
>
>How this will send the remote user through IDP/Authn/RemoteUser

Because accessing an SP will cause a request to the IdP, which will result
in authentication via whatever handler is configured, and the rest is
internal. If the location of the handler is protected by another SP, then
that SP will redirect to the second IdP, back to the ACS, and then back to
the target of that login, which is the login handler of the first IdP,
which will read the identity and complete the login process, eventually
returning to the ACS of the first SP.

-- Scott