Re: [saml-dev] Profiles for configuring a web profile SP with multiple IdPs?

["Cantor, Scott" <cantor.2@osu.edu>]

On 6/10/14, 1:58 PM, "Will Hartung" <willh@mirthcorp.com> wrote:

>Is there a profile discussing how an SP determines which IdP to
>authenticate with for a particular request? Are there any common
>practices?

Yes, https://wiki.oasis-open.org/security/IdpDiscoSvcProtonProfile

It's not SAML specific.

There's also a common domain cookie profile defined in SAML itself, though
I'm not a fan of it.

>I was considering leveraging a referrer header of the initial request
>to help make the determination.

That doesn't seem like to work in general, but I suppose it depends on
context.

-- Scott