Request map and alternate SP entityIDs

[Wessel, Keith]

Hi, all,

We have an SP trying to select a different entityID for specific paths so that we can exempt logins to applications at those paths from our 2FA policy. I'm able to add exempted entityIDs on the IdP if we can just get the SP to use the alternate entityID.

All the docs say something like this should work in SP3, but no matter what we do, the IdP is getting a request from the SP's default entityID.

<RequestMapper type="Native">
<RequestMap applicationId="default">
<Host name="example.illinois.edu" authType="shibboleth" requireSession="true">
<Path name="EDS" authType="None" requireSession="false" />
<Path name="Non2FA" entityIDSelf="https://example.illinois.edu/non2fa" />
    </Host>
</RequestMap>
</RequestMapper>

Any thoughts why the alternate entityID would be used for requests to /Non2FA?

Thanks,
Keith