Configuring two applications within one Shibboleth installation

Peter Schober peter.schober at univie.ac.at
Thu Jun 13 02:50:54 EDT 2013


* Maassen, Helma <Helma.Maassen at atos.net> [2013-06-13 08:44]:
> I think I need the override in this case.

You don't.

> I need a different IDP for two urls;
> so:   https://sp-url/loket/bedrijf --> IDP1
> and: https://sp-url/loket/burger --> IDP2
> 
> I don't think that can be handled otherwise?

It certainly can. See
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPContentSettings
entityID (URI)
  The name of a specific IdP to use when automatically requesting
  authentication because a session does not exist. Allows for
  resource-based selection of an IdP to use, and overrides the entityID
  attribute of a SessionInitiator.

E.g. like this:

<Location /loket/bedrijf>
 AuthType Shibboleth
 ShibRequestSetting requireSession 1
 Require valid-user
 #  Force use of IdP1
 ShibRequestSetting entityID <IDP1>
</Location>

Likewise for /loket/burger and IDP2,
-peter


More information about the users mailing list