Use a specific IDP for a given resource -- mod_shib not doing as we're telling it

[Wessel, Keith]

You were correct. What I didn't know was that the SP admin had redirected, inside his application, /uPortal/Login to /Shibboleth.sso/Login -- lazy session initiation. Mixing it with mod_shib settings, which could have done the same job technically, was muddying the waters.

My apologies for not doing all the detective work I should have done before asking on this list.

Keith


-----Original Message-----
From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: Tuesday, February 23, 2016 11:04 AM
To: Shib Users <users at shibboleth.net>
Subject: RE: Use a specific IDP for a given resource -- mod_shib not doing as we're telling it

> One of our SP operators wants to direct to a specific campus IDP based on
> the URL the user visits on the SP rather than using the discover service. I
> thought it would simply be a matter of adding shibbolethRequestSetting
> entityID blah to the Apache <Location> block where Shib si enabled, but it's
> not working.

It is that simple, so his setting is not being applied.

> We also tried it leaving entityID blank in the SSO element.

You can't do that, no.

> Can anyone explain why the Apache shibbolethRequestSetting keyword
> seems to be ignored?

Some other Apache settings are taking precedence probably.

-- Scott

-- 
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net