Shibboleth Service Provider Configuration for Single app for multiple sub domains with Different IDP's

William Spooner william.spooner at eaglegenomics.com
Mon Oct 29 17:44:43 EDT 2012


On Oct 29, 2012 3:19 PM, "Cantor, Scott" <cantor.2 at osu.edu> wrote:
>
> I know that latter issue is a common reason, but the fact is that with
trivial effort, I can usually hack most systems that try to hide that
information. It's pointless in most cases.
>
> But even if you want to bypass discovery, there are simpler ways than
domains. Using a common entry point still works fine.
>
> As Paul said, this is often about customer demand, but there's a cost.
>

I'm confused about the cost. You can host all of your customer 'domains'
behind a single vhost in Apache and a single entity in Shib (please correct
me on the latter if this is not so). So, other than session initiation,
what extra overhead is introduced by multiple domains themselves?

Will
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20121029/fa979dd9/attachment.html 


More information about the users mailing list