RE: Shibboleth Service Provider Configuration for Single app for multiple sub domains with Different IDP's

[Randy Wiemer]

The counter example is Sales Force which uses a feature they call “My Domains”, which is a subdomain per customer, to handle the IdP discovery process.

 

Randy


 


From: Cantor, Scott
Sent: ‎October‎ ‎27‎, ‎2012 ‎5‎:‎06‎ ‎PM
To: Shib Users
Subject: Re: Shibboleth Service Provider Configuration for Single app for multiple sub domains with Different IDP's



On 10/27/12 6:00 PM, "Raz's" <gajula.rajashekhar at gmail.com> wrote:
>
>When the user trying to access the secure folder/app (in my case
>clientx.domainname.com/application
><http://clientx.domainname.com/application>) then it's has to redirect to
>the idp login page here

No, it has to trigger discover first, and the hostname would not be
clientx.domainname.com, it would be domainname.com or app.domainname.com.

>right. Now working like this for the single client.

It works for any client because you do discovery. Or if you must, you use
paths like /clientx/application to bypass discovery.

>  But i want to use Single SP for my rest of the clients.
> Please confirm me one thing, if i use applicationoverride in my
>shibboleth then will it work perfectly?

You do not need an override.

-- Scott


--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20121028/c11a5efa/attachment.html