-
Notifications
You must be signed in to change notification settings - Fork 165
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Supporting Multiple IDP configurations in a multi tenant fashion for Single Sign On #77
Comments
To support / implement IdP multi-tenancy the best way is to change the |
Hello @oharsta is it possible to change the default SpConfiguration after the service has started? Let's say I have a multiple SpConfiguration stored from the database then I want to trigger the authentication manually and change the configuration like metadata url ect. So far I've tried calling the SAMLEntryPoint then proceeds with |
Hi, going through the current implementation I realised that since the properties are mentioned as values in resources, only one IDP configuration is instantiated at runtime. I was wondering how could one extend it to support multi-tenancy (i.e) supporting multiple IDP Configs (different ACS Urls, certs, etc).
The Spring Security SAML document mentions that it is extensible to support multi tenancy.
Solution wise, I was thinking that maybe for SSO, the endpoint can be changed to
{identifier}/SingleSignOnService
and we could resolve the identifier to fetch the IDP Configuration from a DB query on runtime.Any suggestions would be appreciated. I am unable to find a reference for this anywhere
The text was updated successfully, but these errors were encountered: