Grouper Developers Forum

[Peter Schober <>]

* Peter Schober 
<>
 [2010-12-07 18:24]:
> That's possible with the Shib 2.2 IdP (I /think/ not with any earlier
> releases) by using a SAML 2.0 Metadata <AffiliationDescriptor> and the
> SP in question providing a reference this collection of SPs.
> The IdP will then use the same entityId for all entities enumerated
> by that <AffiliationDescriptor>.

Since your concern seems to be with (not) requiring IdP admins to make
changes: I should have been more clear that the process above does not
involve any changes at the IdP -- only additional metadata (grouping
the entityIds) and the SP sending an adjusted authentication request.
-peter