saml-dev message

Subject: Multiple Assertion Consumer Service URL Support

From: Vipul Mehta <vipulmehta.1989@gmail.com>
To: saml-dev@lists.oasis-open.org
Date: Wed, 8 Aug 2018 11:34:19 +0530

Hi,

Some of the Identity Providers do not support multiple assertion consumer service URLs in service provider configuration e.g. Oracle Access Manager, CA SiteMinder etc.

If we provide SP metadata file with multiple ACS URLs (<md:AssertionConsumerService> along with index) then some IDPs ignore it and pick up only the first one. In my opinion this is against SAML 2.0 specifications and IDP should consider all the ACS URLs. Please confirm.

Regards,
Vipul

Follow-Ups:
- Re: [saml-dev] Multiple Assertion Consumer Service URL Support
  - From: Tom Scavo <trscavo@gmail.com>