Second Office365 Domain requires different "Issuer URI"

[Cantor, Scott]

On 5/6/17, 3:40 AM, "users on behalf of hstrack at ssystems.de" <users-bounces at shibboleth.net on behalf of shibboleth at ssystems.de> wrote:

> So a decision to provide a dynamic IdP entity ID would be necessary based on
> the users principalName, after the user has identified.

I think I already answered that at some point in the past, but 3.3 allows a function to be injected to derive the entityID, and if it's done so as to return a fixed value until the user's identity is established and then returning a different value later, I doubt that's going to break anything. By the time the value is placed into the message I think the user will be identified.

-- Scott