Configuring two applications within one Shibboleth installation
Peter Schober
peter.schober at univie.ac.at
Thu Jun 13 02:50:54 EDT 2013
* Maassen, Helma <Helma.Maassen at atos.net> [2013-06-13 08:44]:
> I think I need the override in this case.
You don't.
> I need a different IDP for two urls;
> so: https://sp-url/loket/bedrijf --> IDP1
> and: https://sp-url/loket/burger --> IDP2
>
> I don't think that can be handled otherwise?
It certainly can. See
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPContentSettings
entityID (URI)
The name of a specific IdP to use when automatically requesting
authentication because a session does not exist. Allows for
resource-based selection of an IdP to use, and overrides the entityID
attribute of a SessionInitiator.
E.g. like this:
<Location /loket/bedrijf>
AuthType Shibboleth
ShibRequestSetting requireSession 1
Require valid-user
# Force use of IdP1
ShibRequestSetting entityID <IDP1>
</Location>
Likewise for /loket/burger and IDP2,
-peter
More information about the users
mailing list