Shared Account/Allow user to choose identity assertion

[Abernathy, Jeff]

Every once in a while I've come across an SP that has need for multiple people to have access to an account. A good example is how Google used to handle sso for mailboxes that you had to give the mailbox as the identity you were logging into, and often multiple people needed access to the same mailbox.

In another life, on a different IDP, we had an interstitial page come up that a user could choose which identity they wished to present to the SP. We had that controlled by group membership, and honestly for that SP it worked really well as it allowed some measure of multiple accounts being open at the same time.

Well, we've run across another SP that it would be helpful for this, to allow users to select to login via their primary account, or a shared account.

Has anyone else faced a similar scenario? Have you done a custom login flow to present the user the choice to login? Do you just spin up a second shared account that they then have to login to? Any other incentive way to solve this?

Thanks,
Jeff Abernathy
Washington University in Saint Louis

________________________________
The materials in this message are private and may contain Protected Healthcare Information or other information of a sensitive nature. If you are not the intended recipient, be advised that any unauthorized use, disclosure, copying or the taking of any action in reliance on the contents of this information is strictly prohibited. If you have received this email in error, please immediately notify the sender via telephone or return mail.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20231024/695b9c8d/attachment.htm>