Multiple IDP Entity IDs with 1 IDP
bs_sunil
bssunil74 at yahoo.com
Wed Jul 24 23:45:59 EDT 2013
Thanks Scott for the quick reply. I think I did that earlier and I got the
error "Unable to locate metadata for identity provider (1jvesn2fkw9vc)". How
do I point to another metadata corresponding to testb without using
override?
Here is an extracted portion of shibboleth2.xml
<RequestMapper type="Native">
<RequestMap>
<Host name="testa.com" entityID="18h1q7erv2f1v"
requireSession="true"/>
<Host name="testb.com" applicationId="app2"
entityID="1jvesn2fkw9vc" authType="shibboleth" requireSession="true"/>
</RequestMap>
</RequestMapper>
<ApplicationDefaults id="default" entityID="https://testa.com"
REMOTE_USER="eppn persistent-id targeted-id">
<Sessions lifetime="28800" timeout="3600" relayState="ss:mem"
checkAddress="false" handlerSSL="false"
cookieProps="http">
<SSO entityID="18h1q7erv2f1v">
SAML2
</SSO>
<Logout>https://testa.com/logout</Logout>
<Handler type="MetadataGenerator" Location="/Metadata"
signing="false"/>
<Handler type="Status" Location="/Status" acl="127.0.0.1 ::1"/>
<Handler type="Session" Location="/Session"
showAttributeValues="false"/>
<Handler type="DiscoveryFeed" Location="/DiscoFeed"/>
</Sessions>
<Errors supportContact="root at localhost"
helpLocation="/about.html"
styleSheet="/shibboleth-sp/main.css"/>
<MetadataProvider type="XML" file="idpmetadataapp1.xml"/>
<AttributeExtractor type="XML" validate="true" reloadChanges="false"
path="attribute-map.xml"/>
<AttributeResolver type="Query" subjectMatch="true"/>
<AttributeFilter type="XML" validate="true"
path="attribute-policy.xml"/>
<ApplicationOverride id="app2" entityID="https://testb.com" >
<MetadataProvider type="XML" file="idpmetadataapp2.xml"/>
</ApplicationOverride>
As you can see testa is associated with "18h1q7erv2f1v" entity id and testb
with "1jvesn2fkw9vc". These are the entity ids in IDP for the 2 SAML
connectors. In the IDP the ACS URLs are
http://testa.com/Shibboleth.sso/SAML2/POST and
http://testb.com/Shibboleth.sso/SAML2/POST respectively. I can access
http://testa.com without any issue but when I access testb, I get the error
Unable to locate metadata for identity provider (1jvesn2fkw9vc).
Thanks
Sunil
--
View this message in context: http://shibboleth.1660669.n2.nabble.com/Multiple-IDP-Entity-IDs-with-1-IDP-tp7588769p7588774.html
Sent from the Shibboleth - Users mailing list archive at Nabble.com.
More information about the users
mailing list