Choice of IdP by SP based on domain name

ytkobe1 . kbbryant61 at gmail.com
Sat Sep 24 21:29:46 EDT 2016


I am hosting a multi-tenant cloud application for which I am implementing
WebSSO profile.

User of the application come from distinct domains (X.com, Y.com, etc).
The cloud service is reachable at distinct FQDNs, each mapping to the
same service access point. Eg: a user from enterprise X.com would access
the service
as   https://app.X.com   and so forth.

With a single SP, I want to be able to redirect unauthenticated requests
to the IdPs of the respective enterprises based on the domain of the
requested URL.
Eg:

    Unauthenticated request https://app.X.com would be redirected by the SP
to IdP idp.X.com,
    an unauthenticated request from Y.com would be redirected to idP.Y.com

etc.

Is this possible with Shibboleth?

Thanks,

/Kobe
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160924/c018123e/attachment.html>


More information about the users mailing list