Skip to Content.
Sympa Menu

shibboleth-dev - RE: Multiple federation support by sp

Subject: Shibboleth Developers

List archive

RE: Multiple federation support by sp


Chronological Thread 
  • From: "Scott Cantor" <>
  • To: <>
  • Subject: RE: Multiple federation support by sp
  • Date: Tue, 21 Nov 2006 11:59:55 -0500

> I am planning to use cookie to keep a user state
> (federation, IdP location).

The SP already maintains a cookie for you recording the IdP(s) used by a
user. The name and format are the same as the SAML Common Domain Cookie
profile.

The WAYF code in svn knows how to read and maintain that cookie as well, for
sharing of the information between the two.

You are far better off thinking not in terms of federations. The IdPs you
deal with reflect your customers. The federations may dictate things, but
ultimately everything is peer to peer.

-- Scott




Archive powered by MHonArc 2.6.16.

Top of Page