<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<br>
<div class="moz-cite-prefix">On 8/4/12 5:12 PM, Henry B. Hotz wrote:<br>
</div>
<blockquote
cite="mid:C6E83DB7-E93E-45E5-B812-360F56588663@jpl.nasa.gov"
type="cite">
<pre wrap="">
I don't suppose there is any way to disable that rule for only one SP?
</pre>
</blockquote>
<br>
Yes, although I don't think we have it documented well on the wiki.
Create a custom RelyingParty definition for that SP, documented
here:<br>
<br>
<a class="moz-txt-link-freetext" href="https://wiki.shibboleth.net/confluence/display/SHIB2/IdPRelyingParty">https://wiki.shibboleth.net/confluence/display/SHIB2/IdPRelyingParty</a><br>
<br>
Probably want to start by just copying the ProfileConfigurations
verbatim from the DefaultRelyingParty.<br>
<br>
Copy the <SecurityPolicy> for SAML 2 SSO, changing what you
want, and giving it a new id.<br>
<br>
Then add a
<meta http-equiv="content-type" content="text/html;
charset=ISO-8859-1">
securityPolicyRef attribute on the profile config to link the new
SecurityPolicy to the custom RP's profile configuration:<br>
<br>
<ProfileConfiguration xsi:type="saml:SAML2SSOProfile"
<meta http-equiv="content-type" content="text/html;
charset=ISO-8859-1">
securityPolicyRef="your-new-policy-id" ...other attributes... /><br>
<br>
<meta http-equiv="content-type" content="text/html;
charset=ISO-8859-1">
<br>
<br>
</body>
</html>