multi-tenant SP

[Yitzchak Scott-Thoennes]

On Thu, Mar 23, 2023 at 5:38 AM Cantor, Scott <cantor.2 at osu.edu> wrote:

> > Yes, I mentioned once it gets past shibboleth, each location checks the
> entityID
> > against a whitelist for that location, and if it doesn't match, logs out
> the
> > shibboleth session and tries again. I think that's what you are talking
> about
> > here?
>
> That is also a way to do it.
>

Are you saying using ShibRequestSetting entityID does that (discards a
shibboleth session with a non-matching entityID, and only then uses the
specified entityID)?

Thanks for all your input.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20230323/31ce10c0/attachment.htm>