Second Office365 Domain requires different "Issuer URI"

Cantor, Scott cantor.2 at
Sun May 7 12:28:26 EDT 2017

On 5/6/17, 3:40 AM, "users on behalf of hstrack at" <users-bounces at on behalf of shibboleth at> wrote:

> So a decision to provide a dynamic IdP entity ID would be necessary based on
> the users principalName, after the user has identified.

I think I already answered that at some point in the past, but 3.3 allows a function to be injected to derive the entityID, and if it's done so as to return a fixed value until the user's identity is established and then returning a different value later, I doubt that's going to break anything. By the time the value is placed into the message I think the user will be identified.

-- Scott

More information about the users mailing list