Shib protecting Wordpress Multisite install using wildcard DNS

[Wessel, Keith]

Hi, all,

I think I know the answer to this question, but I want to make sure I'm not missing something.

We have an SP admin wanting to Shib-protect a multisite Wordpress installation. A Wordpress site owner can request a new site on this service and have it automatically provisioned. Rather than paths to protect each WP installation, they're adding virtual hosts. They have a wildcard DNS entry.

As far as I know, each new hostname created will have to manually be added to the SP metadata in a new set of endpoints for the IDP to allow logins to that WP hostname. There's no way around it.

Is there a solution here, or do I just need to tell them that's not goignt o work unless they want to manually add endpoints?

Thanks,
Keith