Does idp.authn.identitySwitchIsError exists in shibboleth 2.x

Cantor, Scott cantor.2 at
Thu May 26 10:48:50 EDT 2016

> Is "idp.authn.identitySwitchIsError" parameter new to shibboleth 3 ?
> Wondering if this exists in v2.

No, V2 always merges identities within a session if different user IDs show up. This sounds dumb, but the reason is that "user ID" could mean username/password and then X.509 subject DN, they aren't assumed to be different people. There was no support there for normalizing the result down to a username before comparing them.

-- Scott

More information about the users mailing list