Manual Chapter : Example: Configuring an SP policy with different IdPs
Applies To:Show Versions
- 17.1.0, 17.0.0, 16.1.3, 16.1.2, 16.1.1, 16.1.0
Example: Configuring an SP policy with different IdPs
In a per-request policy, you can configure different SP agents in different subroutines to communicate with different Identity Providers (IdPs). In this case, requests directed to different parts of an application could take different branches so that authentication requests are sent to different IdPs.
Here's an example per-request policy that performs SAML step-up authentication with Okta or Ping depending on which application is being accessed.