How can an SP send extra information to the IdP

Tom Scavo trscavo at internet2.edu
Fri Jan 8 10:45:08 EST 2016


On Fri, Jan 8, 2016 at 10:39 AM, Bogdan Albei <bogdan.albei at callsign.com> wrote:
> Would multiple IdPs with their own entityIDs mean multiple Shibboleth
> instances, or is it possible with a single Shibboleth instance?

It can go either way but I don't think Shibboleth is the right tool
for the job. We run a single (modified) instance of simpleSAMLphp that
does this. FYI, Cirrus Identity developed the instance for us.

Tom

> On 8 January 2016 at 15:32, Cantor, Scott <cantor.2 at osu.edu> wrote:
>>
>> > By scoping do you mean setting the Scope tag inside the
>> > IDPSSODescriptor?
>>
>> No, I mean the Scoping element in the AuthnRequest.
>>
>> What you really need to do is explicitly operate an IdP (or many) that run
>> discretely with their own entityIDs and then the O365 tenant would be
>> issuing the request to the specific IdP instance for the ultimate customer.
>>
>> -- Scott
>>
>> --
>> To unsubscribe from this list send an email to
>> users-unsubscribe at shibboleth.net
>
>
>
>
> --
> Bogdan Albei
> Senior Platform Engineer
> Callsign Inc.
> [C] bogdan
>
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net


More information about the users mailing list