Yes. I have one IdP with multiple cloud SP external connectors. I always create a specific endpoint IdP URI for each SP, then in my iRule, select my SAML resource to use in the ACCESS::respond based on the URI used to reach my IdP.
For instance, for an IdP-initiated session for the MyCloudApp, I would configure and use a specific URI for my IdP named https://idp.mycompany.com/mycloudapp
when ACCESS_POLICY_COMPLETED {
switch -glob [ACCESS::session data get session.server.landinguri] {
"/mycloudapp*" {
ACCESS::respond 302 Location "https://idp.mycompany.com/saml/idp/res?id=/Common/MYCLOUDAPP"
}
"/proofpoint*" {
ACCESS::respond 302 Location "https://idp.mycompany.com/saml/idp/res?id=/Common/PROOFPOINT"
}
"/businessolver*" {
ACCESS::respond 302 Location "https://idp.mycompany.com/saml/idp/res?id=/Common/BUSINESSOLVER"
}
}