which scope for AD domain OTHER THAN default one?

[Mauro Minella]

Hi,
I installed Shib 2.3.8 relying on my AD domain contoso.com. This works for any users @contoso.com.
However, I also have users @fabrikam.com in the same AD (as you know, you may simply add a UPN suffix in AD Domains and Trusts to create such users).
This means that I should not prevent users with ANY UPN from trying authenticating.
Now, what should write when I install Shib for the following fields:

-          What is the name of hte AD Domain that this iDP will serve?

-          Which scope will this iDP assert?
In fact, if I write contoso.com as AD Domain name and fabrikam.com for scope, I get the following error in testshib:

2013-03-25 20:47:51 INFO OpenSAML.MetadataProvider.XML : reload thread started...running when signaled
2013-03-25 20:47:53 ERROR OpenSAML.MetadataProvider.XML : metadata instance failed manual validation checking: Scope must have TextContent.
2013-03-25 20:47:53 CRIT OpenSAML.MetadataProvider.XML : maintaining existing configuration, error reloading resource (/var/metadata/testshib-two-aggregate.xml): Metadata instance failed manual validation checking.
2013-03-25 20:47:58 DEBUG Shibboleth.Listener [424]: dispatching message (default/TestShib::run::SAML2SI)
2013-03-25 20:47:58 WARN Shibboleth.SessionInitiator.SAML2 [424]: unable to locate metadata for provider (https://fabrikam.com/idp/shibboleth)
2013-03-25 20:48:16 DEBUG Shibboleth.Listener [430]: dispatching message (default/TestShib::run::SAML2SI)
2013-03-25 20:48:16 WARN Shibboleth.SessionInitiator.SAML2 [430]: unable to locate metadata for provider (https://contoso.com/idp/shibboleth)
2013-03-25 20:48:28 INFO OpenSAML.MetadataProvider.XML : loaded XML resource (/var/www/html/metadata/testshib-two-metadata.xml)
2013-03-25 20:48:42 DEBUG Shibboleth.Listener [422]: dispatching message (default/TestShib::run::SAML2SI)
2013-03-25 20:48:42 WARN Shibboleth.SessionInitiator.SAML2 [422]: unable to locate metadata for provider (https://fabrikam.com/idp/shibboleth)

Thank you for any help

Mauro
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130326/72137522/attachment.html