Convert native Shibboleth SP installation to Shibboleth SP using InCommon metadata

[Jason Johnson]

Hmmm.  Maybe I need a Shib configuration 101.

This is what I have.

1.  One registered InCommon SP: msp.something.com
2.  Multiple clients that need authentication: client1.something.com, client2.something.com, client3.something.com

The questions are:

1.  Can I use the one SP for all three?  And if so, how would a config look?  I know I can register up to 50 SPs with my account but I already have more than 50 IdP clients.
2.  If client1 and client2 are in InCommon and client3 is not, can I do the following:
    a.  Still use msp.something.com for ALL?
    b.  How would that look in a config?

Thanks,
Jason


----- Original Message -----
From: "Scott Cantor" <cantor.2 at osu.edu>
To: users at shibboleth.net
Sent: Friday, March 16, 2012 11:07:35 AM
Subject: Re: Convert native Shibboleth SP installation to Shibboleth SP	using InCommon metadata

On 3/16/12 9:21 AM, "Jason Johnson" <jasonj at terradotta.com> wrote:
>I'm used to going to https://somesite/Shibboleth.sso/Metadata in order to
>generate the metadata for each client site for them to install on their
>IdP.
>My confusion was that there is nothing that tells that to get things
>remotely.  Or I was just doing it wrong.

That has nothing to do with configuring your SP. That's your metadata. You
don't use your own metadata. I don't understand the rest of your comment.

> 
>And, yes, I am looking for multiple metadata sources - InCommon and
>others.

Then just configure multiple sources.

>  What I would also like to do is the following:
> 
>1.  Have both site1.somewhere.com <http://site1.somewhere.com> and
>site2.somewhere.com <http://site2.somewhere.com> use a common SP -
>sp.somewhere.com <http://sp.somewhere.com>.

>  So, in each site, they would have a login link that points to
>sp.somewhere.com/secure <http://sp.somewhere.com/secure>.  This should
>bounce the user to the appropriate login for their site.  Do I have that
>logic right?

If you're talking about load balancing or something like that, then you
should read the topics on clustering. If you're talking about something
else, you've lost me.

-- Scott


--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net