Choice of IdP by SP based on domain name
Cantor, Scott
cantor.2 at osu.edu
Sat Sep 24 21:38:54 EDT 2016
On 9/24/16, 9:29 PM, "users on behalf of ytkobe1 ." <users-bounces at shibboleth.net on behalf of kbbryant61 at gmail.com> wrote:
> User of the application come from distinct domains (X.com, Y.com, etc).
If your application involves resources that might be accessed by users of multiple domains, then your statement is false. And you are breaking your application if you don't recognize that. See also, Box, Google Docs, etc.
> Is this possible with Shibboleth?
Yes, you set the entityID content setting via Apache or the RequestMap to specify the IdP. But you shouldn't, in most cases, and even if you think you can, there are organizations who operate multiple IdPs, so you are breaking them by making this assumption.
-- Scott
More information about the users
mailing list