Problem with ApplicationOverride

[Niklas Langvig]

Hello
I have set up shibboleth on Windows 2008/IIS 7. I'm running as SP
The problem I have is that from this server I need to connect to more than one IdP
So I need to protect different virtuals on the IIS with different ApplicationOverrides.

If I set the metadata and entityid for a specific Idp in the ApplicationDefaults then I can connect and everything works fine
However if I move the metadata and entityid to an ApplicationOverride

<ApplicationOverride id="customerId">
      <Sessions lifetime="28800" timeout="3600" checkAddress="false" relayState="ss:mem" handlerSSL="false">
        <SSO entityID="http://customer/adfs/services/trust">
          SAML2
        </SSO>
      </Sessions>
      <MetadataProvider type="XML" uri="https://customer/FederationMetadata/2007-06/FederationMetadata.xml"
         backingFilePath="customer.xml" reloadInterval="180000" />

Then when I go to this virtual in the IIS now, if I will get to the login window and after typing in username/password.
I get redirected back to our server
But I end up at https://myServer/Shibboleth.sso/SAML2/POST


The system encountered an error at Mon Aug 05 13:27:04 2013

To report this problem, please contact the site administrator atroot at localhost<mailto:root at localhost>.

Please include the following message in any email:

opensaml::FatalProfileException at (https://myServer/Shibboleth.sso/SAML2/POST)

Unable to establish security of incoming assertion.



In the Shibd.log

I can read
2013-08-06 10:49:26 WARN Shibboleth.SSO.SAML2 [1]: no metadata found, can't establish identity of issuer (http://customer/adfs/services/trust)

2013-08-06 10:49:26 WARN Shibboleth.SSO.SAML2 [1]: detected a problem with assertion: Unable to establish security of incoming assertion.

Google has not been my friend in solving this, so is there anyone on this list that has some ideas of what I'm doing wrong?

Thanks

Niklas
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130806/b84c0b7c/attachment.html