Multiple SP entityIDs from a single, wildcard Apache vhost?

Cantor, Scott cantor.2 at osu.edu
Tue Jun 30 20:56:28 EDT 2015


I didn't catch this in your original note:

     <!--
           This is where I might be going wrong - I removed entityID
attribute as I want to
           specify the IdP via query string, and I also removed
discoveryURL as a discovery
           service isn't necessary-->
        <SSO>SAML2 SAML1</SSO>


Your problem is both *that* and the fact that you're *not* providing the entityID to the SP on the query string. You're giving it to your application, the thing at /Login, that's not the SP. The SP runs manual session initiation at /Shibboleth.sso/Login.

So I guess I don't know exactly what you're shooting for, but that's not gonna work unless you put code at /Login to do the redirect into the SP with the entityID set. And you can't do that with requireSession set.

-- Scott



More information about the users mailing list