SessionInitiator for a specific IdP endpoint

Tom Scavo trscavo at gmail.com
Thu Jan 8 16:05:34 EST 2015


On Thu, Jan 8, 2015 at 10:07 AM, Cantor, Scott <cantor.2 at osu.edu> wrote:
> On 1/8/15, 2:57 PM, "Tom Scavo" <trscavo at gmail.com> wrote:
>
>>Thanks Peter. So I can configure a protocol handler to support one or
>>more bindings, that's good to know. Is it possible to specify the
>>desired binding on-the-fly? This doesn't appear to be possible.
>
> No, it's not, outgoingBindings is statically configured.

Okay, for the archive, I conclude that multiple DiscoveryResponse
endpoints are needed at the SP, something like this:

https://app.example.org/Shibboleth.sso/Login/SAML2/HTTP-Redirect
https://app.example.org/Shibboleth.sso/Login/SAML2/HTTP-POST
https://app.example.org/Shibboleth.sso/Login/SAML2/HTTP-POST-SimpleSign
https://app.example.org/Shibboleth.sso/Login/SAML1/AuthnRequest

where each one is configured for one and only one binding at the IdP.
(I probably should have mentioned this earlier but I need this level
of specificity for a test SP I'm building.)

Thanks,

Tom


More information about the users mailing list