Role management

[Cantor, Scott]

On 9/1/16, 10:59 AM, "users on behalf of Ramaiah, Vanna G." <users-bounces at shibboleth.net on behalf of ramaiah at musc.edu> wrote:

> In our org, an user can have  upto 3 roles but just one login for authentication. We have
> a vendor that cannot handle all 3 roles in one login. Any idea how can I implement this
> one? Can shib release data on the fly?

The IdP can only base its decisions on what it knows, so the answer is yes, but it almost certainly won't know what it needs to know to help you work around a bug of that magnitude.

The vendor's not going to identify its service differently based on the specific thing the user is wanting to do, and so I don't see what information you could possibly have to base the decision on.

-- Scott