Copy shibboleth sp installation when applications not on the same host?
Rainer Hoerbe
rainer at hoerbe.at
Wed Aug 3 10:09:19 EDT 2016
> Am 03.08.2016 um 15:55 schrieb Cantor, Scott <cantor.2 at osu.edu>:
>
> Generally speaking that goes against the model. Applications are
> supposed to be addressable for policy, and combining them like that
> makes any and all distinctions invisible to the IdP. What happens next
> is that somebody comes back to the list asking how they can make policy
> happen despite there being one entityID, and the answer is that you can’t.
While not best practice, an SP can communicate simple attribute release policies using an ACS endpoint per application, which I know is being done at a fairly large Siteminder installation.
- Rainer
More information about the users
mailing list