Multiple IdPs *with* discovery

[Cantor, Scott]

On 3/25/14, 11:22 AM, "Rob Gorrell" <rwgorrel at uncg.edu> wrote:
>
> 
>You say I don't have two IdP's in this sense because they would both
>configured to answer as the same entityID, is that correct?

That's a fair benchmark for that determination, yes.

> we currently use DNS/A record to provide passive failover to a standby
>IdP should our primary
> become unresponsive. I was curious about how this was handled in
>deployments significantly larger than us, especially if usage dictates
>the IdP scaling beyond running on a single host.

That isn't my understanding of how DNS works, but it's not relevant to
your question.

>I understand the browser can only redirect to a single endpoint, but
>because the WAYF/DS is involved in returning that particular endpoint, I
>didn't know and was curious if there was/could be any intelligence baked
>in (I guess at the DS level) allowing
> it to pick from multiple "sites" for a given entityID.

No, you're mistaken about the DS protocol. The DS returns the entityID,
that's it. The SP finds the endpoint to use based on the metadata from
that.

-- Scott