Shibboleth.sso/DS and Shibboleth.sso/Login

[Liam Hoekenga]

In reading the documentation, it seems to allow the use of multiple session
initiators, you need to put them inside a "Chaining" SessionInitiator
definition.

I guess that part of my confusion is that only place I've seen "Location"
set is in the chaining session initiator definition, e.g.

  <SessionInitiator type="Chaining" Location="/DS" id="DS" isDefault="true"
relayState="cookie" acsByIndex="false">

or

  <SessionInitiator type="Chaining" Location="/Login" isDefault="true"
id="Login" entityID="https://shibboleth.example.edu/idp/shibboleth">

I might guess that the first one is actually a SAMLDS initiator, and that
the second is a SAML2 initiator, but if I add location "/DS" to the SAMLDS
definition contained in the Chaining definition, the "/DS" location isn't
available.  My goal is to enable both the /DS and /Login locations, but I
think that Scott's previous message suggests that that might not (probably
isn't) necessary?

Liam


On Mon, Feb 17, 2014 at 11:32 AM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> On 2/17/14, 11:27 AM, "Liam Hoekenga" <liamr at umich.edu> wrote:
> >
> >Is it possible to enable both the DS and Login endpoints at the same
> >time?  The only configuration I see that mentions either location is
> >the top level of the "Chaining" session initiator definition.
>
> Neither has any meaning to the software, there are session initiator
> endpoints and that's it. What they do is up to the configuration.
>
> The <SSO> element defaults to a single initiator at /Login. Defining more
> than one requires adding SessionInitiators manually.
>
> Whether you need to depends on the use case. Defining a discoveryURL and
> no entityID in the <SSO> element will default to requesting discovery. You
> can then override that with entityID content settings for specific
> locations and possibly avoid anything extra.
>
> -- Scott
>
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140219/fcb701c1/attachment-0001.html