Shibboleth idp with Azure AD

[Cantor, Scott]

On 3/2/22, 12:40 PM, "users on behalf of Ciro Larrazabal" <users-bounces at shibboleth.net on behalf of ciro.larrazabal at gyselroth.com> wrote:
>    There is a way to ask in the way back (after being auth by azure) to choose between the possible identities?

Functionally, yes, you can build account chooser behavior into the login process (or anything else, it's extensible and you can make it do whatever you want). No, it's not terribly simple when you don’t have the grounding, obviously.

You can build anything you want, you just have to be prepared to know Spring, Java, Webflow, and work without a lot of docs, or you pay somebody to help, or you pay for membership to get our help (within reason, we'll provide direction and debugging help but we're not just going to do it for you).

It comes up occasionally, but not often enough to generalize into a feature. Generally when you're dealing with IDM problems like this, you should suck it up and fix it. The IdP should not be the dirty laundry shield, though it can be, because the problems will just infect everything else sooner or later.

-- Scott