SSO with multiple Google domains

[Andrew Cheung]

Thanks for the hints, Peter. I searched the Google groups and found that I
should switch on the "Domain specific issuer" checkbox, as well as using
the full email address as the NameID.  (
https://groups.google.com/forum/#!topic/google-apps-saml-sso/ZJxr-T9dYig)

  -Andrew



On Mon, Jan 19, 2015 at 10:50 AM, Peter Schober <peter.schober at univie.ac.at>
wrote:

> * Andrew Cheung <acheung at brookfieldres.com> [2015-01-19 16:22]:
> >
> > I used SAML tracer in firefox to examine the SAML requests, and observed
> > that the first SAML request has
> >
> > AssertionConsumerServiceURL="https://www.google.com/a/dev.mysiteA.ca/acs
> "
> >
> > although I am trying to access http://mail.google.com/dev.mysiteB.com
> >
> > The SAML response has
> >
> > <saml2p:Response Destination="
> https://www.google.com/a/dev.mysiteA.ca/acs"
> >
> > instead of the secondary domain (dev.mysiteB.com) as well.
>
> If the request from Google is incorrect you can't fix it with
> Shibboleth configuration. I.e., looks like you'd need to change
> something on their end for the requests to be correct/different.
> -peter
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>



-- 

*Andrew Cheung*

Senior Developer



*Royal LePage Real Estate Services / Brookfield Real Estate Services*

39 Wynford Drive, Toronto, ON M3C 3K5

*T* 416.510.5734  *V* 415734

Email: acheung at b <X at royallepage.ca>rookfieldres.com

www.royallepage.ca

Download our iPhone App
<https://itunes.apple.com/ca/app/royal-lepage-canada/id810365559?mt=8>


*Join Royal LePage on:*

Facebook <https://www.facebook.com/royallepage>  |  LinkedIn
<http://www.linkedin.com/company/royal-lepage>  |  Twitter
<https://twitter.com/royal_Lepage>  |  Google+
<https://plus.google.com/u/0/+royallepage/posts>  |  Pinterest
<http://www.pinterest.com/rlpcanada/>  |  YouTube
<https://www.youtube.com/user/RoyalLePageCanada> |  Instagram
<http://www.instagram.com/royal_lepage>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20150119/c2ed6b70/attachment.html