Shibboleth.sso/DS and Shibboleth.sso/Login

[Cantor, Scott]

On 2/17/14, 11:27 AM, "Liam Hoekenga" <liamr at umich.edu> wrote:
>
>Is it possible to enable both the DS and Login endpoints at the same
>time?  The only configuration I see that mentions either location is
>the top level of the "Chaining" session initiator definition.

Neither has any meaning to the software, there are session initiator
endpoints and that's it. What they do is up to the configuration.

The <SSO> element defaults to a single initiator at /Login. Defining more
than one requires adding SessionInitiators manually.

Whether you need to depends on the use case. Defining a discoveryURL and
no entityID in the <SSO> element will default to requesting discovery. You
can then override that with entityID content settings for specific
locations and possibly avoid anything extra.

-- Scott