Thanks Scott. Maybe I didn't understand your suggested option (1) correctly.<br><br>Option (1) only works like SP1 use UsernamePassword login handler and SP2 use RemoteUser.<br><br>Is that correct?<br><br>If not, can you provide more details?<br>
<br clear="all">Yaowen<br>
<br><br><div class="gmail_quote">On Thu, Aug 16, 2012 at 4:03 PM, Cantor, Scott <span dir="ltr"><<a href="mailto:cantor.2@osu.edu" target="_blank">cantor.2@osu.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div class="im">On 8/16/12 6:53 PM, "Yaowen Tu" <<a href="mailto:yaowen.tu@gmail.com">yaowen.tu@gmail.com</a>> wrote:<br>
><br>
>I want to use different UserNamePassword Handler for both SPs. Can I<br>
>define something like:<br>
<br>
</div>No, because you have the same context class in both. There's no difference.<br>
<div class="im"><br>
>But I don't know how to specify it in AuthnContextClassRef. After reading<br>
>the docuemnt, seems like AuthnContextClassRef only accept things like:<br>
><br>
>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport<br>
<br>
</div>I don't know what that means or is asking exactly.<br>
<div class="im"><br>
>Is there a sample configuration that I can refer to?<br>
<br>
</div>No.<br>
<div class="im"><br>
>Also is it possible to config it so IdP knows that all the AuthnReqeust<br>
>that comes from SP1 will use LoginHandler1. So we don't need to specify<br>
>it in the request any more.<br>
<br>
</div>No. If you want a login handler that does something based on the SP, you<br>
will have to write one.<br>
<div class="HOEnZb"><div class="h5"><br>
-- Scott<br>
<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</div></div></blockquote></div><br>