diff --git a/docs/simplesamlphp-reference-sp-hosted.txt b/docs/simplesamlphp-reference-sp-hosted.txt index 48f7d6df0467ca1eb7afe49de10ba7260b865bd4..5ad22ef413fc3d2fa1e2dcdf2eabfc148be60588 100644 --- a/docs/simplesamlphp-reference-sp-hosted.txt +++ b/docs/simplesamlphp-reference-sp-hosted.txt @@ -128,6 +128,19 @@ These options set the default for this SP, but options for each IdP can be set i 'redirect.sign' => true, +### Fields for scoping + +Only relevant if you are a sp connected to a proxy/bridge. + +`IDPList` +: The list of scoped idps ie. the list of entityids for idps that +are relevant for this sp. The final list is the concatenation of the +list given as parameter to InitSSO, the list configured at the sp +(here) and the list configured at the ipd for this sp. The +intersection of the final list and the idps configured at the +proxy/bridge will be presented to the user at the discovery service +if neccessary. If only one idp is in the intersection the +discoveryservice will go directly to the idp. Shibboleth 1.3 SP options ---------------------- diff --git a/docs/simplesamlphp-reference-sp-remote.txt b/docs/simplesamlphp-reference-sp-remote.txt index c02b7a937e13ad49eb438bc7ef2b084e8cb17983..bda0a01c50f321165746150fb4237fcb7c442820 100644 --- a/docs/simplesamlphp-reference-sp-remote.txt +++ b/docs/simplesamlphp-reference-sp-remote.txt @@ -247,6 +247,19 @@ These options overrides the options set in `saml20-idp-hosted`. 'redirect.validate' => TRUE, 'certificate' => 'server.crt', +### Fields for scoping + +Only relevant if you are a proxy/bridge and wants to limit the idps this +sp can use. + +`IDPList` +: The list of scoped idps ie. the list of entityids for idps that are +relevant for this sp. The final list is the concatenation of the list +given as parameter to InitSSO (at the sp), the list configured at the +sp and the list configured at the ipd (here) for this sp. The intersection +of the final list and the idps configured at the at this idp will be +presented to the user at the discovery service if neccessary. If only one +idp is in the intersection the discoveryservice will go directly to the idp. Shibboleth 1.3 options ----------------------