Multiple SAML providers for authentication

[Cantor, Scott]

> Is there any way to have an authentication mechanism that
> tries TWO different SAML options?

In principle. MFA can script anything, but since there's only one SAML flow, you'd have to be driving its discovery process under the covers in some way to get it to pick different IdPs to use each time.

> Bonus points if they can choose, via a web page, which
> method 'e.g. Staff Or Student or Associate User'.

That's a "you" task because it's not something anybody can develop outside of custom requirements. I did a KB on that sort of thing. Ultimately it's just a discovery service, or at least that's one way of approaching it, though that isn't what I did in the KB.

-- Scott