Shibboleth service provider supports two entityIds for same ACS endpoints

Alan Buxey alan.buxey at myunidays.com
Mon Dec 2 14:49:45 UTC 2024


hi,

yes - the inner details of each SAML config behind each entityID are
isolated and not dependent/linked with any other.  But you will need to
ensure that the IdPs know/trust the new entityID - so any rules they have
in place for eg relying party access, attribute release etc will need to be
copied for the new SP - its a new entityID thus it's a new entity.  Also,
if there are any attributes that are pairwise (eg ePTID or SAML2
pairwise-id) then, as the target is based on the entityID and that is now a
different ID  , then the value released will change and be different to
that before.

regards

alan
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20241202/71056294/attachment.htm>


More information about the users mailing list