AW: Apache vhost configuration: set applicationID dynamically

[Philipp, Daniel]

Hello Scott,

That's a rather late reply, but let me summarize anyhow how we solved
this issue ...

> On 10/2/13 10:58 AM, "Scott Cantor" wrote:

> >The problem is: ShibRequestSetting applicationID wants a literal
> string
> >which must refer to the corresponding application override
> configuration.
> >Thus, I can't set the value dynamically.
> 
> So you've basically answered your own queston. ;-)
> 
> A more relevant starting point may be to question why you need them at
> all.

We found out that it's easier to work with multiple session initiators.

First, we added several session initiators, each one with a different
Location and entityID referring to another IdP.
Depending on certain configuration profiles, our source application
is configured in that way that it will redirect to different locations
on our Shibboleth SP.
Now, based on the access to a certain location our Shibboleth SP now
decides which IdP is suitable.

The relevant part of shibboleth2.xml now looks somehow like this:

<SessionInitiator
  type="SAML2"
  Location="/profile1"
  isDefault="true"
  relayState="cookie"
  entityID="someIDP">
</SessionInitiator>

<SessionInitiator
  type="SAML2"
  Location="/profile2"
  isDefault="false"
  relayState="cookie"
  entityID="anotherIDP">
</SessionInitiator>

-- Daniel