SSO Implementation
Raz's
gajula.rajashekhar at gmail.com
Tue Oct 30 14:25:07 EDT 2012
Thanks Nate,
As per your assumption, each sub domain point to separate server in that we
need to install the SAML SP but previously we used that one only now we are
developing our product based on the cloud like single application serve to
the multi clients due to that we are looking for another alternative here.
I didn't find any link for applicationoverride in your previous reply.....
- Raja.
On Tue, Oct 30, 2012 at 11:48 PM, Nate Klingenstein <ndk at internet2.edu>wrote:
> Raja,
>
> Actually i'm new to SAML implementation due to that i don't know how to
> deploy the separate SAML SP's for each sub domain, if you don't mind can
> you provide little bit more guide on that.
>
>
> I don't know what else I would say. Each server for each subdomain
> operates its own SP with unique configuration for that subdomain and its
> associated IdP.
>
> I'm totally confused with applicationoverride, please clarify my doubt
> regarding this.
>
> 1) site name : shall i specify it as xxxx.com or sp.xxxx.com
> 2) if i specify site name as a sp.xxxx.com then is it necessary configure
> sp.xxxx.com in application default section
> 3) is there any specific pattern for the host name to use them in the
> applicationoverride?
> 4) please classify applicationdefault and applicationoverride based our
> requirement
>
>
> I'd only use it if you need a single SP to protect all the subdomains
> simultaneously. Hostnames match whatever the clients think they're talking
> to.
>
> Hosts and paths are not connected to application ID's automatically. In
> your environment, you would need to set up mapping from subdomains to
> ApplicationOverrides. There is an example for how to do that in the
> article I linked.
>
> Hope this helps,
> Nate.
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20121030/5e3f4818/attachment.html
More information about the users
mailing list