Multiple IDP Entity IDs with 1 IDP

[Peter Schober]

* bs_sunil <bssunil74 at yahoo.com> [2013-07-26 20:35]:
> Thanks Peter. Yes I am good with one entity ID for both vhosts.

Great.

> - Have one or several metadata providers so that the single SP knows 
> -  all the IdPs in use. No application overrides. 
> 
> When you say metadata providers, I am assuming IDP supplied metadata
> referenced like in         <MetadataProvider type="XML"
> file="idpmetadata.xml"/>. Can you give an example like where I could supply
> that info?

I just said to add the metadata for all IDPs to your SP --this is not
specific to and has nothing to do with vhosting or anythig else you
asked about. The documentation clearly covers how to add metadata to
the SP (e.g. using one or more lines like you post above, or using a
folder or many other ways).

> I do not have a discovery/wayn service. So I can supply multiple
> metadata like file="idpmetadata.xml"

Adding SAML metadata (describing IDPs) to an SP has nothing to do with
IdP discovery.
You said you wanted each vhost to always use a specific IdP (to work
around having to do IdP discovery) and I already posted the Apache
httpd directive how to do that.

> - Have a single piece (one EntityDescriptor) of SAML metadata 
>   containing ACS URLs for /both/ testa.com/ and testb.com/ and give 
>   that metadata to the IDP. 
> 
> An example of where I need to do this (like in shibboleth2.xml?)would be
> very helpful.

No, with "SAML Metadata" I'm mean SAML 2.0 Metadata, as specified by
OASIS.
I had assumed that at one point you provided the IdPs with SAML
Metadata describing your SP. If that is the case you'll need to modify
that metadata so that both testa.com and testb.com are present in all
AssertionConsumerService elements where only one of them is listed.
(Since you said one entityID for both vhosts is enough that means you
only have a single EntityDescriptor describing your SP to the
IdPs. You just have to make sure both testa.com and testb.com are
contained in that metatdata.)

If you did not provided the IdPs with SAML 2.0 Metadata for your SP
you'll have to supply the same information via some other method,
specific to these IdPs.
-peter