SSO with multiple Google domains

Knape, Dean M. knape at njit.edu
Thu Nov 2 15:21:48 EDT 2017


Thank you, all that responded.  I'll explore the post-authentication flow.
Short of allocating multiple distinct usernames to bob, it's looking like
separate Google accounts may be the best option.

On Thu, Nov 2, 2017 at 2:15 PM, Andrew Morgan <morgan at orst.edu> wrote:

> On Thu, 2 Nov 2017, Knape, Dean M. wrote:
>
> Greg,
>>
>> Thanks.  This is exactly the case.
>>
>
> Let me restate the problem so I understand.
>
> You have 1 person with the username "bob" in your IDP.  This person has 2
> separate Google accounts: bob at domain1.com and bob at domain2.com.  They are
> not aliases on the same Google account.  "bob" needs to be able to choose
> which Google account to use.
>
> As Greg suggested, you could use a post-authentication flow to display a
> selection page to "bob".
>
> Or maybe you guys should rethink having separate Google accounts for the
> same person...  :)
>
>         Andy
> --
> For Consortium Member technical support, see
> https://wiki.shibboleth.net/confluence/x/coFAAg
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>



-- 

Dean Knape
University Information Systems
NJ Institute of Technology
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20171102/f931fef7/attachment.html>


More information about the users mailing list