SSO Implementation

[Nate Klingenstein]

Raja,

> Actually i'm new to SAML implementation due to that i don't know how to deploy the separate SAML SP's for each sub domain, if you don't mind can you provide little bit more guide on that.

I don't know what else I would say.  Each server for each subdomain operates its own SP with unique configuration for that subdomain and its associated IdP.

> I'm totally confused with applicationoverride, please clarify my doubt regarding this.
> 
> 1) site name : shall i specify it as xxxx.com or sp.xxxx.com
> 2) if i specify site name as a sp.xxxx.com then is it necessary configure sp.xxxx.com in application default section
> 3) is there any specific pattern for the host name to use them in the applicationoverride?
> 4) please classify applicationdefault and applicationoverride based our requirement

I'd only use it if you need a single SP to protect all the subdomains simultaneously.  Hostnames match whatever the clients think they're talking to.

Hosts and paths are not connected to application ID's automatically.  In your environment, you would need to set up mapping from subdomains to ApplicationOverrides.  There is an example for how to do that in the article I linked.

Hope this helps,
Nate.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20121030/70493687/attachment-0001.html