Can a single SP front multiple disparate applications?

Cantor, Scott cantor.2 at osu.edu
Fri Sep 6 14:31:41 EDT 2013


On 9/6/13 2:26 PM, "Nate Klingenstein" <ndk at internet2.edu> wrote:

>Bryan,
>
>> We currently don¹t have single SP deployed on campus, many (100s) of
>>our in house applications are using CAS.
>>  
>> Is it feasible to move them off CAS and behind one SP?
>
>Feasible, yes.  Ideal? Probably not...
>
>You'll want to use ApplicationOverrides to give each logically distinct
>application its own entityID at a minimum and use vhosts to ensure that
>each session is distinct and unshared.
>
>https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPApplication

For clarification re: my response, this is all about how to assign logical
boundaries to URLs *on the server hosting the SP*.

If the applications aren't on that server, then it's about proxying, or
it's not even possible.

-- Scott




More information about the users mailing list