Multiple IDP Entity IDs with 1 IDP

bs_sunil bssunil74 at yahoo.com
Wed Jul 24 23:45:59 EDT 2013


Thanks Scott for the quick reply. I think I did that earlier and I got the
error "Unable to locate metadata for identity provider (1jvesn2fkw9vc)". How
do I point to another metadata corresponding to testb without using
override? 

Here is an extracted portion of shibboleth2.xml

   <RequestMapper type="Native">
        <RequestMap>
            
            <Host name="testa.com" entityID="18h1q7erv2f1v"
requireSession="true"/>
            
            <Host name="testb.com" applicationId="app2"
entityID="1jvesn2fkw9vc" authType="shibboleth"  requireSession="true"/>
        </RequestMap>
    </RequestMapper>
 
    <ApplicationDefaults id="default" entityID="https://testa.com"
                         REMOTE_USER="eppn persistent-id targeted-id">

        <Sessions lifetime="28800" timeout="3600" relayState="ss:mem"
                  checkAddress="false" handlerSSL="false"
cookieProps="http">

            <SSO entityID="18h1q7erv2f1v">
              SAML2
            </SSO>

            <Logout>https://testa.com/logout</Logout>
            <Handler type="MetadataGenerator" Location="/Metadata"
signing="false"/>
            <Handler type="Status" Location="/Status" acl="127.0.0.1 ::1"/>
            <Handler type="Session" Location="/Session"
showAttributeValues="false"/>
            <Handler type="DiscoveryFeed" Location="/DiscoFeed"/>
        </Sessions>

        <Errors supportContact="root at localhost"
            helpLocation="/about.html"
            styleSheet="/shibboleth-sp/main.css"/>

       <MetadataProvider type="XML" file="idpmetadataapp1.xml"/>

       <AttributeExtractor type="XML" validate="true" reloadChanges="false"
path="attribute-map.xml"/>
       <AttributeResolver type="Query" subjectMatch="true"/>
       <AttributeFilter type="XML" validate="true"
path="attribute-policy.xml"/>

        <ApplicationOverride id="app2" entityID="https://testb.com" >
           <MetadataProvider type="XML" file="idpmetadataapp2.xml"/>
        </ApplicationOverride>

As you can see testa is associated with "18h1q7erv2f1v" entity id and testb
with "1jvesn2fkw9vc". These are the entity ids in IDP for the 2 SAML
connectors. In the IDP the ACS URLs are
http://testa.com/Shibboleth.sso/SAML2/POST and
http://testb.com/Shibboleth.sso/SAML2/POST respectively. I can access
http://testa.com without any issue but when I access testb, I get the error
Unable to locate metadata for identity provider (1jvesn2fkw9vc).

Thanks
Sunil



--
View this message in context: http://shibboleth.1660669.n2.nabble.com/Multiple-IDP-Entity-IDs-with-1-IDP-tp7588769p7588774.html
Sent from the Shibboleth - Users mailing list archive at Nabble.com.


More information about the users mailing list