Shibboleth Service Provider Configuration for Single app for multiple sub domains with Different IDP's

[Cantor, Scott]

On 10/27/12 6:00 PM, "Raz's" <gajula.rajashekhar at gmail.com> wrote:
>
>When the user trying to access the secure folder/app (in my case
>clientx.domainname.com/application
><http://clientx.domainname.com/application>) then it's has to redirect to
>the idp login page here

No, it has to trigger discover first, and the hostname would not be
clientx.domainname.com, it would be domainname.com or app.domainname.com.

>right. Now working like this for the single client.

It works for any client because you do discovery. Or if you must, you use
paths like /clientx/application to bypass discovery.

>  But i want to use Single SP for my rest of the clients.
> Please confirm me one thing, if i use applicationoverride in my
>shibboleth then will it work perfectly?

You do not need an override.

-- Scott