Using different ldaps

[Ramaiah, Vanna G.]

How does 2fa works? If a user is already logged in using SSO but accessing a second SP that requires 2fa, would it trigger 2fa?




-----Original Message-----
From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: Tuesday, August 01, 2017 11:34 AM
To: Shib Users <users at shibboleth.net>
Subject: RE: Using different ldaps



> We are in idp V3.3. Is there a way to use multiple ldap in the ldap.properties?
> Is it possible to route users authentication to different ldap 
> depending on the ip address of the client or the SP they are accessing?

Firstly, properties are a convenience, they are *not* the configuration or a determinant of what's possible or not possible. Secondly, the only built-in way to do that is with advanced usage of the JAAS back-end and your question doesn't make sense because authentication only happens when SSO doesn't. If you're actually disabling SSO, then it might make sense.

-- Scott

--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net