SP configuration for different WAYF services

[Peter Schober]

* Samsamoddin Rajaei <Samsamoddin.Rajaei at bsb-muenchen.de> [2023-02-10 10:41]:
> I want to configure them to send authetications to different WAYF Services:

As to that specific requirement: If there exists an IDP Discovery
Service that includes the superset of both services (i.e., includes
all of the IDPs offered by your "WAYF-1" as well as those from your
"WAYF-2") you might consider forgetting about optimising the task of
picking an IDP to log in with any further and just use the
superset-SAMLDS for both applications.

That approach seems to work even for the largest publishers in the
world that make use of https://seamlessaccess.org/ for example.

As any SAMLDS worth using will offer an option to remember previously
selected IDPs it doesn't matter much for subjects what or how many
/other/ IDPS that SAMLDS knows/offers.

Finally, authorisation also should't be dealt with on the level of the
SAMLDS, of course. (Usually there will be other ways for a subject to
initiate a session with a given IDP, outside of the SAMLDSs offered by
your application.)

-peter