Shibboleth Developers

["Scott Cantor" <>]

> Is there any way to find out what federation an SP belongs to 
> when it's querying an IdP?

Federations don't exist in our software. But anything you can find out is in
metadata. If you want to interpret that in some way, that's up to you. We
just deal in groups of entities.

> Although the SP can be configured to accept certs for IdPs, some 
> federations are specifying certain certs, so if an IdP needs 
> to service multiple SPs in multiple federations it needs to know what 
> certs to use to sign Responses.

You should consider looking closer at the Shibboleth implementation before
trying to implement something completely new. Most of these concepts are
there.

-- Scott