Using Shibboleth with multiple domains

[Paul Hethmon]

It doesn't matter. The SAML information is sent from the IdP to the SP typically in a form POST, so no domain name issues there. The SAML protocol is designed to avoid browser security issues, no relying on frames and direct communication between the IdP and SP (under normal circumstances).

If you are wanting a copy of Shibboleth SP to support multiple hostnames on the same server, then you just have to configure it to that.

Paul


From: Bai Shen <baishen.lists at gmail.com<mailto:baishen.lists at gmail.com>>
Reply-To: Shibboleth Users <users at shibboleth.net<mailto:users at shibboleth.net>>
Date: Wed, 4 Apr 2012 14:16:53 -0400
To: Shibboleth Users <users at shibboleth.net<mailto:users at shibboleth.net>>
Subject: Re: Using Shibboleth with multiple domains

On Tue, Apr 3, 2012 at 4:25 PM, Paul Hethmon <paul.hethmon at clareitysecurity.com<mailto:paul.hethmon at clareitysecurity.com>> wrote:
Your question is very vague. Are you talking about the IdP or the SP?

Either supports multiple hostnames.

Paul
--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net<mailto:users-unsubscribe at shibboleth.net>

Sorry.  I was referring to SPs.  For example, the IdP would be at one.example.com<http://one.example.com> and one SP would be at two.example.com<http://two.example.com>.  However, we also have an SP at three.example.org<http://three.example.org>.

I'm not sure how Shibboleth will work with domains that are completely different(ie .com and .org).
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20120404/e7af19e8/attachment.html