Dynamically selecting an identity provider for a single sign-on request

摘要: An identity provider (IdP) discovery service operative at a (SP) is described. In operation, and as valid requests are received by the SP via normal IdP-initiated flows, builds-up knowledge about relationship between IdP (that redirected request) initiator of request. The instance typically inferred from an HTTP referrer field, information may be ascertained client-specific information, such client system IP address, DNS domain, domain user e-mail target URL for incoming request, or value associated with particular header field. This maintained in one more mapping table(s) that associate request attributes-to-IdP data. mappings then used to facilitate new has been determined originate other than IdP.