Shibboleth in multi tenant app

[Ron Gowen]

I have been recently tasked with setting up a Shibboleth SSO login for a
client to access our existing application. Our application has it's own
login utility (not sso) that our other clients will continue using.

As I set up Shibboleth it ask for a directory to secure. I cannot nor do I
want to secure my whole web site or even a given application within the
website with Shibboleth or my other clients won't be able to access.

So my question is: how do I use Shibboleth to authenticate users from just
the one client without affecting others.

My idea at this point is to have a landing page specific to my Shibboleth
client that I secure with Shibboleth and have this be the point of entry
for this client. The user can land on this page, get authenticated via
Shibboleth, once I get the proper message from Shibboleth I log them into
the application and redirect to the application.

I am not totally on board with this idea as I do not feel confidant I can
ensure that all the users from this client will always use the this landing
page as their point of entry.

I hoping that someone out there has dealt with this scenario and has an
idea of how to set this up for my new client.

Thank you for any help or advice.

Ron
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160219/1fae8c08/attachment-0001.html>