alternate attributeSourceIDs for a given nameid format

Cantor, Scott cantor.2 at osu.edu
Wed Mar 10 02:28:12 UTC 2021


On 3/9/21, 9:20 PM, "users on behalf of Baron Fujimoto" <users-bounces at shibboleth.net on behalf of baron at hawaii.edu> wrote:

> Upon further reflection, I'm not sure how we're supposed to be able distinguish between their instances
> without something like an entityID difference. But maybe I'm missing something else.

Concur is IdP-initiated, which means you control the relay state, so basically you bake in a target value in each link, and write code to check it as an activation condition. [1]

Would I do this? No, I'd tell them to stuff it. But that's how I would do it if I was going to roll over.

-- Scott




More information about the users mailing list