question on IdP Discovery - SAML IOP event

["Kyle Meadors" <kyle@drummondgroup.com>]

Another issue has arisen from the SAML IOP event we would like guidance from SSTC on.

 

In testing, IdP Discovery, we use the common domain cot.projectliberty.org. Participants make their URLs off of this, for example participant1.cot.projectliberty.org.

 

However, Participant 1 needs its SP and IdP endpoints to be in the common domain. For example instead of using IdP SSO endpoint URL:

 https://idp.participant1.com/idp

 

they need the IdP endpoint to be:

https://participant1.cot.projectliberty.org/idp

 

Basically needing the common domain to establish their local SSO session. Some others in the test group feel this is not normative and no one else needs this domain change for IdP Discovery. Would this be permissible or unnecessary? Thanks.

 

Kyle Meadors

Drummond Group Inc.

Principal, Test Process

817-709-1627

kyle@drummondgroup.com

 

Calendar: http://tinyurl.com/KyleMeadors-DGI-Calendar

 

* * * * * * * * * * * * * * * * * * * * * * * *

CONFIDENTIALITY DISCLAIMER

This email, including attachments, is confidential and proprietary. It constitutes exclusive communication solely to the addressee. Any entity other than the intended addressee is prohibited from use of this communication for any purpose. This email, including attachments, may not be distributed, whole or in part.

* * * * * * * * * * * * * * * * * * * * * * * *