shibboleth2.xml ServiceProvider on MS IIS: Can Configure One IdP or the Other to Work, but Never Both

[Cantor, Scott]

On 2/24/15, 3:42 AM, "Mark Neidig" <mneidig at ftni.com> wrote:


>
>Below is my shibboleth2.xml. I can configure one IdP or the other to 
>work, but never both. 
>When I remove a Host element, the other host element works and vice versa.

Also, I don't know what "does not work" means. Most of what IIS says is a 
lie unless you change its error reporting, so if you're basing any 
perceived behavior on what it says, that won't get you far until it stops 
masking the real messages being reported.

>My ApplicationOverride elements do no harm as they are, but they don't 
>help either. 

The cookie paths down there also look suspicious. I don't know if it's 
possible to set a cookie against a path that's not contained within the 
path of the resource setting the cookie. Maybe that works, but it doesn't 
seem like it should.

But I'm purely guessing, I have no idea what the problem is to start with.

-- Scott