Sharing SP Metadata amongst multiple SPs
Phil Lello
phil at dunlop-lello.uk
Sat Nov 7 14:00:01 EST 2015
On Sat, Nov 7, 2015 at 5:48 PM, Tom Scavo <trscavo at gmail.com> wrote:
> This is not a shib question but...
>
> On Sat, Nov 7, 2015 at 10:54 AM, Phil Lello <phil at dunlop-lello.uk> wrote:
> >
>
> > is it
> > sufficient to populate the AssertionConsumerServiceURL for each SP, or
> would
> > there need to be a common ACS to proxy assertions (after adjusting
> payload
> > as necessary and re-signing/re-encrypting messages)?
>
> The AssertionConsumerService endpoint is indexed, so you can add as
> many as you like, each with its own unique index value.
>
> Perhaps I should have specified I'm talking about the
AssertionConsumerService in the AuthnRequest from the SP, and whether or
not the Shibboleth IdP will respect use value in the request if it isn't
present in the metadata the IdP holds for a given SP.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20151107/c2298a78/attachment-0001.html>
More information about the users
mailing list