1 SP with multiple IDPs

[Kt]

What are you trying to do?

I am trying to find a way to configure Multiple IDP with one SP. Right now we have 1 IDP running with simplesamlSAMLPHP as SP. on a subdomain like http://sso.WEBSITE.com/

Do need to setup another subdomain in order to add a new IDP and redeploy the simplesamlphp there? Or I can add another IDP to the same SP?

What have you done?

I have an SSO system setup using simplesamlphp-1.14.11, which at the moment serving as SP to 1 IDP. As show in the code below:

=====authsources.php========

<?php
$config = array (
    'admin' => array (
        ''
    ),
    'default-sp' => array (
        'saml:SP',
        'entityID' => null,
        'idp' => 'https://SOME_IDP_URL',
        'discoURL' => null
    )
);

=========================

=====saml20-idp-remote.php=====

<?php
$metadata['https://SOME_IDP_URL'] = array (
  'entityid' => 'https://SOME_IDP_URL',
  'contacts' => array (  ),
  'metadata-set' => 'saml20-idp-remote',
  'SingleSignOnService' => array (),
  'SingleLogoutService' => array (),
  'ArtifactResolutionService' => array (),
  'NameIDFormats' => array (),
  'keys' => array (
    0 => array (),
    1 => array (),
  ),
);

===========================

Any help on this would be much appreciated!

[Dubravko Penezic]

Hi it is possible if IdP are not on same installation of SSP.

On other hand maybe that is issue in original code of SSP, which i discover few days ago.