Choice of IdP by SP based on domain name

[ytkobe1 .]

>And you are breaking your application if you don't recognize that.

I do not recognize. Could you pl let me know how I am breaking it?

Regards,

Rk
x77309

On Sat, Sep 24, 2016 at 6:38 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> On 9/24/16, 9:29 PM, "users on behalf of ytkobe1 ." <
> users-bounces at shibboleth.net on behalf of kbbryant61 at gmail.com> wrote:
>
> >  User of the application come from distinct domains (X.com, Y.com, etc).
>
> If your application involves resources that might be accessed by users of
> multiple domains, then your statement is false. And you are breaking your
> application if you don't recognize that. See also, Box, Google Docs, etc.
>
> > Is this possible with Shibboleth?
>
> Yes, you set the entityID content setting via Apache or the RequestMap to
> specify the IdP. But you shouldn't, in most cases, and even if you think
> you can, there are organizations who operate multiple IdPs, so you are
> breaking them by making this assumption.
>
> -- Scott
>
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160926/59dd34a8/attachment.html>