Configuration of second app to use SSO. Problem with SP configs

[Павел Шашко]

I have configured work of my first web application (context '/') with
shibboleth idp v3 - all is ok.
Now I try to integrate the same behavior to second application (context
'/web') and want SSO to get worked.

I work with file-based SP-metadata, which configured in
metadata-providers.xml:
<MetadataProvider
xmlns="urn:mace:shibboleth:2.0:metadata"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="urn:mace:shibboleth:2.0:metadata
http://shibboleth.net/schema/idp/shibboleth-metadata.xsd"
xsi:type="FilesystemMetadataProvider"
id="LocalMetadata"
failFastInitialization="true"
metadataFile="%{idp.home}/metadata/urntestpshashkoklimovsk_sp-test-localhost.xml"/>

I try to use the same sp metadata file for second app, but after succes
response from idp I forwarded to page *http://localhost/saml/SSO
<http://localhost/saml/SSO>. *I find this address in SP-metadata file:
<md:AssertionConsumerService
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
                                     Location="http://localhost:80/saml/SSO"
index="0" isDefault="true"/>
        <md:AssertionConsumerService
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact"
                                     Location="http://localhost:80/saml/SSO"
index="1"/>

but I think, that for my second app with another context this address must
be *http://localhost:80/web/saml/SSO <http://localhost:80/web/saml/SSO>*.
right?

I have created new sp metadata file with suffix 2 at the end with changed
address and add another block to metadata-providers.xml:
<MetadataProvider
xmlns="urn:mace:shibboleth:2.0:metadata"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="urn:mace:shibboleth:2.0:metadata
http://shibboleth.net/schema/idp/shibboleth-metadata.xsd"
xsi:type="FilesystemMetadataProvider"
id="LocalMetadata"
failFastInitialization="true"
metadataFile="%{idp.home}/metadata/urntestpshashkoklimovsk_sp-test-localhost2.xml"/>

but after this both applications stop working...
*what should I do for second app to get SSO worked?*

Thanks,
Pavel
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20150909/9241651f/attachment-0001.html>