Multiple IdPs without discovery

[Ted O'Connor]

Thanks for the help Scott and Peter!  I think my issue was more of an
Apache config one than Shibboleth.  I created different VirtualHosts for
each subdomain so I could reuse the Location value but vary the entityID.
 This seems to work for me now:

NameVirtualHost *:443
<VirtualHost *:443>
  ServerName https://a.example.com:443
  <Location /login>
    AuthType shibboleth
    ShibRequestSetting requireSession On
    ShibRequestSetting entityID https://idp1.example.com/idp/shibboleth
    require valid-user
  </Location>
  ...
</VirtualHost>
<VirtualHost *:443>
  ServerName https://b.example.com:443
  <Location /login>
    AuthType shibboleth
    ShibRequestSetting requireSession On
    ShibRequestSetting entityID https://idp2.example.com/idp/shibboleth
    require valid-user
  </Location>
  ...
</VirtualHost>


Ted



On Thu, Mar 20, 2014 at 10:27 AM, Peter Schober
<peter.schober at univie.ac.at>wrote:

> * Peter Schober <peter.schober at univie.ac.at> [2014-03-20 15:26]:
> > I guess "requireSessionWith <IDP-entityID>" is what you want, then.
> >
> https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPContentSettings
>
> Sorry, entityID, like Scott already said.
> -peter
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140320/f9933be7/attachment.html