Configuring two applications within one Shibboleth installation

Cantor, Scott cantor.2 at osu.edu
Thu Jun 13 11:03:33 EDT 2013


> * Cantor, Scott <cantor.2 at osu.edu> [2013-06-13 16:36]:
> > You definitely don't need it to override your own entityID in the
> > majority of cases. Add a RelyingParty element for the IdP in
> > question and set entityID there to override your SP's name for that
> > IdP.
> 
> Sorry, forgot about that.

I don't publicize it much, because it's a *very* bad practice. Your name shouldn't change because the IdP does, that's a sign of very deep dysfunction in your relationships. It will cause problems, and it's not a perfect solution because there are flows in which the SP can't know the IdP ahead of time. But none involving SAML 2.0 usually.

-- Scott




More information about the users mailing list