Configuring Multiple IdPs with OpenStack and Shibboleth

[Cantor, Scott]

As Peter said,  you're likely confusing discovery with the SP. The SP doesn't do discovery, you need a discovery solution for that part of the problem. The SP simply relies on a standard redirection protocol to invoke one and you tell it to do that.

Under no circumstances should you be playing games with the SP's old and long dead features to mess around with directing requests. Call a DS, done. That's the only thing you should ever have the SP do to initiate requests if you have > 1 IdP.

A DS can be a simple web page of links, or a full metadata-backed application.

-- Scott