Second Office365 Domain requires different "Issuer URI"
cantor.2 at osu.edu
Sun May 7 12:28:26 EDT 2017
On 5/6/17, 3:40 AM, "users on behalf of hstrack at ssystems.de" <users-bounces at shibboleth.net on behalf of shibboleth at ssystems.de> wrote:
> So a decision to provide a dynamic IdP entity ID would be necessary based on
> the users principalName, after the user has identified.
I think I already answered that at some point in the past, but 3.3 allows a function to be injected to derive the entityID, and if it's done so as to return a fixed value until the user's identity is established and then returning a different value later, I doubt that's going to break anything. By the time the value is placed into the message I think the user will be identified.
More information about the users