Multiple IdP in a singler Server

[Cantor, Scott]

On 1/13/17, 3:52 AM, "users on behalf of Matthew Slowe" <users-bounces at shibboleth.net on behalf of M.Slowe at kent.ac.uk> wrote:

> The Path=/idp/ means that if you had a second IDP on /idp2/ then the
> browser would keep them apart.

Only superficially. Same origin policy is domain only. There is no meaningful separation of anything on one vhost, and increasingly that really applies to eTLD + 1 for lots of things on the web.

-- Scott