Multiple IDP Entity IDs with 1 IDP

[Cantor, Scott]

On 7/25/13 2:19 PM, "bs_sunil" <bssunil74 at yahoo.com> wrote:

>My apologies if the use case is not clear. I am a bit confused though. I
>have
>setup 2 virtual hosts in Apache pointing 2 different sites. I need
>Shibboleth SP to work for both virtual hosts which is why I setup the
>request mapper and the application override thinking the default config
>would take care of the first virtual host (which it did) and the
>application
>override would take care of the 2nd virtual host.

That is not a use case for overrides, so that's why I'm pushing back.
Nothing needs to "take care" of vhosts. You apply whatever settings you
want, and you supply metadata to federations containing whatever endpoints
are needed, typically a set per vhost.

If you want the two vhosts to act as separate SP entityIDs, that is one
basic case for overrides, yes.

>Here is the virtual host for first app in apache. The second virtual is
>exactly the same but with testb.com and proxy pointing to app2. Virtual
>host
>IP address (not put in here) are same. So, how do I do it without request
>mapper and application override?

If you want to apply settings to content, vhosts or not, use the Apache
commands as documented in the ApacheConfig instructions. Principally
ShibRequestSetting.

For example, to establish the IdP to use for a vhost, you use
ShibRequestSetting entityID <name>

-- Scott