Does idp.authn.identitySwitchIsError exists in shibboleth 2.x
Cantor, Scott
cantor.2 at osu.edu
Thu May 26 10:48:50 EDT 2016
> Is "idp.authn.identitySwitchIsError" parameter new to shibboleth 3 ?
> Wondering if this exists in v2.
No, V2 always merges identities within a session if different user IDs show up. This sounds dumb, but the reason is that "user ID" could mean username/password and then X.509 subject DN, they aren't assumed to be different people. There was no support there for normalizing the result down to a username before comparing them.
-- Scott
More information about the users
mailing list