SessionInitiator for a specific IdP endpoint

[Ian Young]

> On 8 Jan 2015, at 13:49, Peter Schober <peter.schober at univie.ac.at> wrote:
> 
> * Tom Scavo <trscavo at gmail.com> [2015-01-08 14:28]:
>> but how do I cause an AuthnRequest to be sent to a specific
>> SingleSignOnService endpoint at the IdP?
> 
> As the IDP's SingleSignOnService is of EndpointType (not
> IndexedEndpointType) I'm assuming you can only select the
> SingleSignOnService based on the Binding, i.e. set outgoingBindings in
> the SP's authnRequest,

Right. And the consequence is that it doesn't make sense to have more than one SingleSignOnService in metadata using the same binding, although I've seen people try to do that from time to time.

    -- Ian




-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5250 bytes
Desc: not available
Url : http://shibboleth.net/pipermail/users/attachments/20150108/14e964ef/attachment.bin