<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
I wanted to thank everyone for their responses. Lots of good ideas
but the one that looks the best for us is Scott's suggestion of
using his contributed extension. <br>
<br>
Scott,<br>
<br>
I looked on the contributions page but am unsure which one is yours
the ECP extension was included as of v2.3+ and the x509 login
handler seems simular but was last updated by
<meta charset="utf-8">
<span style="color: rgb(153, 153, 153); font-family: Helvetica,
Arial, sans-serif; font-size: 12px; font-style: normal;
font-variant: normal; font-weight: normal; letter-spacing: normal;
line-height: 13px; orphans: 2; text-align: left; text-indent: 0px;
text-transform: none; white-space: normal; widows: 2;
word-spacing: 0px; -webkit-text-size-adjust: auto;
-webkit-text-stroke-width: 0px; background-color: rgb(255, 255,
255); display: inline !important; float: none; "><span
class="Apple-converted-space">Halm Reusser</span></span><a
href="https://wiki.shibboleth.net/confluence/display/%7Eyezwzxwzxfgokl%252Fk9icjhx2jude%253D@https%253A%252F%252Faai-logon.switch.ch%252Fidp%252Fshibboleth"
class="url fn confluence-userlink userlink-0"
data-username="yezwzxwzxfgokl%2Fk9icjhx2jude%3D@https%3A%2F%2Faai-logon.switch.ch%2Fidp%2Fshibboleth"
title="" data-user-hover-bound="true" style="color: rgb(102, 102,
102); text-decoration: underline; font-style: normal; font-family:
Helvetica, Arial, sans-serif; font-size: 12px; font-variant:
normal; font-weight: normal; letter-spacing: normal; line-height:
13px; orphans: 2; text-align: left; text-indent: 0px;
text-transform: none; white-space: normal; widows: 2;
word-spacing: 0px; -webkit-text-size-adjust: auto;
-webkit-text-stroke-width: 0px; background-color: rgb(255, 255,
255); "></a> <br>
<br>
-Chris<br>
<br>
On 2/8/12 1:09 PM, Cantor, Scott wrote:
<blockquote
cite="mid:BA63CEAE152A7742B854C678D9491383262D2A5B@CIO-KRC-D1MBX01.osuad.osu.edu"
type="cite">
<blockquote type="cite">
<pre wrap="">I am trying to propose a solution to my superiors but am unsure if it is
possible. I would appreciate a sanity check. I have two seperate IDPs (IDP-A
& IDP-B). Each has its own unique entity id which it uses to service SPs. I
want to associate specific SPs with IDP-A and others with IDP-B, these
associates are exclusive to each IDP. If IDP-A & IDP-B are using Terracotta to
share session info.
</pre>
</blockquote>
<pre wrap="">
Even if that works, which seems unlikely, it probably is in the realm of "unsupported". If they're separate IdPs, they shouldn't share state.
</pre>
<blockquote type="cite">
<pre wrap="">My question is this, is there any way for a user to go from
a SP serviced by IDP-A to a SP serviced by IDP-B without being forced to
reauthenticate because the _idp_session cookie does not match IDP-B's
hostname and vice versa?
</pre>
</blockquote>
<pre wrap="">
You should put a SSO system in front of both if you want them to share a common authentication mechanism. If you don't have something like that, then an alternative is to implement a stateless cookie-based login handler using a shared key, which my contributed extension in the contributions page does.
-- -Scott
--
To unsubscribe from this list send an email to <a class="moz-txt-link-abbreviated" href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a>
</pre>
</blockquote>
<br>
<br>
<div class="moz-signature">-- <br>
<meta http-equiv="Content-Type" content="text/html;
charset=ISO-8859-1">
<title>OIRT Signature</title>
<style media="all" type="text/css">
#sig{
margin:6px 0 0 15px;
padding:6px;
width: 530px;
}
#sig .person{
font-family:Georgia, "Times New Roman", Times, serif;
font-size:12px;
font-style:italic;
color:#333333;
font-weight: bolder;
padding: 0 0 0 15px;
}
#sig .title{
font-family:Georgia, "Times New Roman", Times, serif;
font-size:10px;
font-style:italic;
color:#333333;
padding: 0 0 0 15px;
letter-spacing: .1em;
line-height: 10px;
}
#sig .row {
line-height:12px;
color:#333333;
padding-top: 13px;
padding: 10px 0 0 15px;
font-family: Verdana, Arial, Helvetica, sans-serif;
font-size: 10px;
}
#sig .top {
font-family:Georgia, "Times New Roman", Times, serif;
font-size:11px;
font-style:italic;
color:#CC0000;
padding:7px 0 0 0;
font-weight: bolder;
}
#sig .toptwo {
font-family:Georgia, "Times New Roman", Times, serif;
font-size:11px;
font-style:italic;
color:#CC0000;
padding-left: 120px;
font-weight: bolder;
}
#sig .row a:link, .row avisited {
color:#5CBDBF;
text-decoration:none;
}
#sig .row a:over{
color:#333333;
border: 1px black dotted;
}
</style>
<div id="sig">
<table border="0" cellpadding="0" cellspacing="0" width="100%">
<tbody>
<tr>
<td valign="top" width="150"><img moz-do-not-send="false"
src="cid:part1.05050208.09040006@fdu.edu" alt="fdu
logo" height="62" width="140"></td>
<td>
<div class="person">Christopher Bland</div>
<div class="title">Systems Manager<br>
Information Systems and Technology</div>
<div class="row"> <strong>1000 River Road, Teaneck NJ
07666</strong><br>
Mail Stop: T-BH1-01<br>
<img moz-do-not-send="false"
src="cid:part2.05030505.09000704@fdu.edu"
alt="phone" height="10" width="13">: 201-692-2414 |
<img moz-do-not-send="false"
src="cid:part3.05090606.03050704@fdu.edu" alt="fax"
height="13" width="15">: 201-692-2494 | <img
moz-do-not-send="false"
src="cid:part4.08080506.00000809@fdu.edu"
alt="email" height="11" width="12">: <a
href="mailto:chris@fdu.edu">chris@fdu.edu</a> </div>
</td>
</tr>
<tr>
<td colspan="2">
<div class="top">"Fairleigh Dickinson University will
never<br>
ask for your
password. Please do not share it with others!"</div>
</td>
</tr>
</tbody>
</table>
</div>
</div>
</body>
</html>