Question for SP design input

Cantor, Scott cantor.2 at osu.edu
Thu Aug 7 15:15:33 UTC 2025


A general question for those who are running any, shall we say, "challenged" IdP implementations that have inappropriate constraints on overlaps between metadata for different SPs, I'd like to gather some info on those bugs.

I think the best way to answer this is in the context of existing proxies that are operating as different SPs outbound (i.e emulating full mesh while operating as a proxy in front of the real SPs).

The SP hub plugins will face some similar challenges in making that work and I'm hoping to gather some specifics on exactly what can't overlap if you define two SPs to an IdP like Okta or Entra.

I am led to believe there are some limitations there on things like overlapping keys, ACS endpoints, and such but I don't touch those things so I'm not that aware of what actually works or not.

Replying here is fine and I won't follow up every comment with "thanks" so thanks ahead of time.

-- Scott




More information about the users mailing list