Using Shibboleth with multiple domains

[Bai Shen]

On Tue, Apr 3, 2012 at 5:18 PM, Peter Schober <peter.schober at univie.ac.at>wrote:

> * Bai Shen <baishen.lists at gmail.com> [2012-04-03 22:16]:
> > Is this possible with Shibboleth?
>
> Yes. Shibboleth uses only host cookies so DNS domains do not factor
> into the workings of the protocol,
> -peter
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>

That doesn't seem right.  Googling for host cookie seems to imply that it
is something like www.example.com whereas a domain cookie would be .
example.com  Both are using the same domain.  This is the way all of the
multi-domain examples I encountered are worded.

Can you elaborate?

Thanks.

On Tue, Apr 3, 2012 at 4:25 PM, Paul Hethmon <
paul.hethmon at clareitysecurity.com> wrote:

>  Your question is very vague. Are you talking about the IdP or the SP?
>
>  Either supports multiple hostnames.
>
>  Paul
>
--
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>

Sorry.  I was referring to SPs.  For example, the IdP would be at
one.example.com and one SP would be at two.example.com.  However, we also
have an SP at three.example.org.

I'm not sure how Shibboleth will work with domains that are completely
different(ie .com and .org).

Thanks.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20120404/60d87c1e/attachment.html