SP setup for multiple IDPs

Cantor, Scott cantor.2 at osu.edu
Mon May 15 18:50:00 UTC 2023


> What is the recommended way to handle this type setup? 

If there wasn't a URL difference between the applications, then there couldn't have been any overrides (at least none being used) and it was just broken to begin with, or at least full of unused settings.

I wouldn't use overrides but if it's there and working, then the only change required to migrate one of them to a different IdP is to...change the setting. That's it. If you're trying to get rid of the overrides then the entityID setting has to move over into the RequestMap in the same places the original overridden applicationId was set. That's why overrides are almost always unneeded now.

If instead you have a situation where one URL has to allow for 2 IdPs or 20, that's discovery. There is nothing that can be done except discovery (or moving to IdP-initiated SSO).

-- Scott




More information about the users mailing list