Trying my first installation of shibboleth and have a quesion about the SP. Can the SP be on the same machine that is hosting the content I want protected or does it need to be on it's own machine? thanks!