Use specific IDP based on virtual host

[Josh Brackett]

Hey, thanks for the quick response. After you suggested the application override section I went to that wiki section (https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPApplicationOverride). I think this is exactly what I was looking for.

Can I just bounce this off you so I can check my understanding?

In my httpd.conf file for each virtual host (except a default perhaps) I would add
	ShibRequestSetting applicationId {myclientId}
to the Location directive.

Then I create an ApplicationOverride in the shibboleth2.xml with an id of {myclientId} and inside of that I can add 
 <Sessions lifetime="…>
  <SSO entityID="{this_clients_IDP}">…</SSO>
  <MetadataProvider type="XML" file="{this_clients_metadata.xml}" />
</Sessions>

Does that sound reasonable? Am I understanding what you/documentation are suggesting correctly?

Thanks again for the help
Josh Brackett

On Apr 23, 2012, at 4:20 PM, Chad La Joie wrote:

> Well, if your virtualizing the SP correctly you can, for each
> application override section, set the session initiator to use and one
> type of initiator just takes the entity ID of the IdP you want to use.
> 
> On Mon, Apr 23, 2012 at 15:55, Josh Brackett <Josh.Brackett at trx.com> wrote:
>> Our virtual host setup works something like this:
>> 
>> https://{clientId}.{application}.com
>> 
>> So, depending on the URL the user is trying to access our application from we can determine which IDP they should use to attempt a login.
>> 
>> My question: Is there a way to tell the SP "given this URL choose this IDP"? I've read some things about appending an entityId parameter to the URL string but that's not quite what we want.
>> 
>> Thanks
>> Josh Brackett
>> --
>> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
> 
> 
> 
> -- 
> Chad La Joie
> www.itumi.biz
> trusted identities, delivered
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
>