IdP and SP on same FQDN

[Cantor, Scott]

> I have a requirement that would need me to have a protected URL on the
> same FQDN as the IdP.  It it possible to install the SP on the same host (and
> importantly  the same domain name) as the IdP?

Yes, it's just very easy to get confused or tie yourself in knots. You start confusing entityIDs if they're close to identical, or you have problems isolating IdP access from being interfered with by the SP.

If you're an experienced web server administrator and deployer, it's not hard. If not, it's fairly nightmarish. But the same is probably true of the IdP or SP as a whole, so in the end it's not much different. It just makes support here for novices incredibly hard, so we discourage it for most.

-- Scott