multiple "virtual" idp entity ids

[Cantor, Scott]

On 3/2/22, 8:40 PM, "users on behalf of Paul Henson" <users-bounces at shibboleth.net on behalf of henson at signet.id> wrote:

>    Is there any way to do something similar on the idp, where a given 
>    instance could support multiple different idp entity ids with different 
>    configuration/settings, short of using jetty virtual hosting to actually 
>    run multiple separate instances of the idp? Unlike in the SP case, it 
>    seems it would be rather inefficient to do so.

No, the IdP isn't meant to work that way, and the lack of isolation would be pretty bad as a security practice. If it were not in the abstract just a single IdP operating as multiple "names", sharing a key is a terrible idea, and if it were...we don't really support that idea, we want IdPs to have one name.

-- Scott