multiple "virtual" idp entity ids

[Cantor, Scott]

On 3/3/22, 10:04 PM, "users on behalf of Paul Henson" <users-bounces at shibboleth.net on behalf of henson at signet.id> wrote:

>    Heh. Your doable and my doable when it comes to making the idp do fancy 
>    tricks is like a virtuoso compared to a kid taking piano lessons :).

I suppose but I guess the point is, it's theoretically possible but probably not really practical and certainly not a goal of the design.

And I do strongly believe that this isn't safe. Sharing a memory space with another IdP for somebody else with a different key is just a huge risk. The IdP is also not that heavyweight at this point, a separate Jetty instance with an IdP could run in under 1G of heap for any small to medium deployment.

-- Scott