Multiple IdPs *with* discovery

Cantor, Scott cantor.2 at osu.edu
Tue Mar 25 13:33:17 EDT 2014


On 3/25/14, 1:32 PM, "Cantor, Scott" <cantor.2 at osu.edu> wrote:
>
>The discovery UI isn't some kind of mandated thing, you can do whatever
>you want. But the only thing you get to return is the entityID, so yes,
>you could probe something, and then return a different entityID based on
>that to get the SP to pick a different endpoint.

But of course, you don't get to control the DS other people use. If you're
talking about SPs you control, you can do lots of things, but if you're
trying to offer your IdP to a federation, no, this is unworkable, which is
why I initially said you're really off base.

-- Scott




More information about the users mailing list