Where to specify which ACS to use for logging in?

[Br LRd]

>And if that really is too complex, what if I wanted to use not artifact,
but http-redirect binding?
Whoops, http-redirect binding isn't supported by shibboleth. Then I'll use
another one:

   - urn:oasis:names:tc:SAML:2.0:bindings:PAOS

(just to see what changes are needed).

Reason I don't want to use http post is that my client can't do HTTP
responses so a POST redirect wouldn't work.

On Fri, Dec 16, 2016 at 6:23 PM, Br LRd <blasterradius at gmail.com> wrote:

> Let's say the IdP does support artifact binding, and the shib wiki says AB
> is also supported by shibboleth, what would I need to change on my end so
> that's what SP would use?
> And if that really is too complex, what if I wanted to use not artifact,
> but http-redirect binding?
>
> Thank you,
>
> On Fri, Dec 16, 2016 at 5:50 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:
>
>> On 12/16/16, 10:39 AM, "users on behalf of Br LRd" <
>> users-bounces at shibboleth.net on behalf of blasterradius at gmail.com> wrote:
>>
>> >    That's for the  <>/Shibboleth.sso part; I know for example it also
>> uses the servername value from (apache) etc, but how
>> > do I change Shibboleth to use a different binding?
>>
>> You shouldn't (most IdPs do not support artifacts) and in general the SP
>> doesn't really handle that well. It really depends on the "scope" of the
>> change.
>>
>> If Scott Koranda happens to see this, I know his SPs have made use of
>> artifact and he may have a good tip for making this work. I do it so rarely
>> that I don't even know what the "simplest" way would be, but it definitely
>> depends on why you're doing it and under what circumstances.
>>
>> -- Scott
>>
>>
>> --
>> To unsubscribe from this list send an email to
>> users-unsubscribe at shibboleth.net
>>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20161216/245c8a91/attachment-0001.html>