shibboleth2.xml ServiceProvider on MS IIS: Can Configure One IdP or the Other to Work, but Never Both

[MikeWho]

Hi Mark,

I don't know if you can have two Host elements with the same name, perhaps
someone else could confirm.

You could try one Host containing two Path elements, corresponding to your
two sub-paths. Set the entityID attribute on these Path elements, rather
than on the Host. You may also need to set the applicationID attribute on
the Path elements if they are separate applications. (For instance, if both
IdPs send different attributes I'd guess you'd have to set up two separate
ApplicationOverrides, each with distinct attribute maps)

Then you'd have two ApplicationOverrides, in which you set the SP entityID,
the IdP metadata (in a MetadataProvider element inside the
ApplicationOverride) and the attribute map (in a AttributeExtractor
element). 

Hope this helps,
Mike.



--
View this message in context: http://shibboleth.1660669.n2.nabble.com/shibboleth2-xml-ServiceProvider-on-MS-IIS-Can-Configure-One-IdP-or-the-Other-to-Work-but-Never-Both-tp7611850p7611867.html
Sent from the Shibboleth - Users mailing list archive at Nabble.com.