diff --git a/docs/simplesamlphp-scoping.txt b/docs/simplesamlphp-scoping.txt index 1f58695e6568c354cfc6b8cc2b5e1742f58b8789..53675e5fd42cad6f0e96895265fac4f71c37f50b 100644 --- a/docs/simplesamlphp-scoping.txt +++ b/docs/simplesamlphp-scoping.txt @@ -12,7 +12,7 @@ Scoping Scoping allows a service provider to specify a list of identity providers in an authnRequest to a proxying identity provider. This is an indication to the -proxying identity provider, that the service will only deal with the identity +proxying identity provider that the service will only deal with the identity providers specified. A common use is for a service provider in a hub-and-spoke architecture to @@ -36,7 +36,7 @@ who ultimately authenticates the user. A count of zero permits no proxying. If ProxyCount is unspecified the number of proxy indirections is not limited. `IDPList` -: The list of trusted IdPs ie. the list of entityIDs for identity providers +: The list of trusted IdPs, i.e. the list of entityIDs for identity providers that are relevant for a service provider in an authnRequest. ### Note ### @@ -45,13 +45,15 @@ SimpleSAMLphp does not support specifying the GetComplete option. Usage ----- -The ProxyCount and IDPList option can be specified in the following places +The ProxyCount and IDPList option can be specified in the following places: - as a state parameter to the authentication source - in the saml:SP authentication source configuration - in the saml20-idp-remote metadata - in the saml20-sp-remote metadata +Example configuration: + # Add the IDPList 'IDPList' => array( 'IdPEntityID1',