Shibboleth Developers

["Scott Cantor" <>]

> > By specifying >1 Subjects within an Assertion? (I only just noticed that
> > this was possible...)

No, the ID alone isn't helpful, you need a referral/endpoint to the second
IdP with the EncryptedID and the security credentials you need to use to
access it (which might be the original SSO token).

Liberty specifies all that using WS-Addressing.

The bulk of this work is implementing linking and policy at the IdPs to
control the referrals.

-- Scott