Multiple IDP Entity IDs with 1 IDP
bs_sunil
bssunil74 at yahoo.com
Wed Jul 24 19:35:00 EDT 2013
Hello
I have a third party IDP where I can create multiple SAML connectors. I am
using the latest Shibboleth SP for apache on the application side. I have
configured (that is request mapper, application override) in Shibboleth2.xml
to cater to 2 virtual hosts in apache. It is working fine for one app with
one IDP metadata (<MetadataProvider type="XML"
file="idpmetadata-app1.xml"/>). But for the other app how do I specify
another locally available IDP metadata file?
Most of the search in forumns I see are "Discovery/WAYF service" when it
comes to virtual hosts which I do not want to use since the IDP metadata are
locally available. The IDP is same but the entity id for each virtual host
app is different (which is why 2 metadata files) corresponding to 2 SAML
connectors in the IDP.
I do not mind using one entity for both virtual host but here is the issue.
Lets say the virtual hosts are https://testa.com and https://testb.com. When
the SAML request comes from https://testa.com, the SAML response is posted
to https://testa.com by the IDP since https://testa.com is configured as the
ACS url. But when the request comes from https://testb.com, there is an
infinite http redirection because IDP posts the response to
https://testa.com and not https://testb.com.
Thanks
Sunil
--
View this message in context: http://shibboleth.1660669.n2.nabble.com/Multiple-IDP-Entity-IDs-with-1-IDP-tp7588769.html
Sent from the Shibboleth - Users mailing list archive at Nabble.com.
More information about the users
mailing list