Environment Planning and Design Assistance

[Greg Haverkamp]

On Mon, Aug 1, 2016 at 9:12 AM, Adam Zheng <adam.zheng at esu10.org> wrote:

> Is it better to have one IdP with 30+ directories or will this cause
> logins to take forever. Is it even possible to have a mix of AD and LDAP on
> one IdP.
>
> I've read the docs at
> https://wiki.shibboleth.net/confluence/display/IDP30/LDAPAuthnConfiguration
> but could not determine an answer regarding multiple directories.
>

If you have to integrate 30 directories, I'd consider setting up a
metadirectory, rather than trying to do this all in Shibboleth.  Then put
the directory selection logic at that layer.  You can do that in OpenLDAP,
or there are also very full-featured commercial vendors who will be happy
to sell you solutions.

Greg
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160801/fadd8f27/attachment.html>