On 6/10/14, 1:58 PM, "Will Hartung" <> wrote:
>Is there a profile discussing how an SP determines which IdP to
>authenticate with for a particular request? Are there any common
>practices?
Yes, https://wiki.oasis-open.org/security/IdpDiscoSvcProtonProfile
It's not SAML specific.
There's also a common domain cookie profile defined in SAML itself, though
I'm not a fan of it.
>I was considering leveraging a referrer header of the initial request
>to help make the determination.
That doesn't seem like to work in general, but I suppose it depends on
context.
-- Scott
