OpenAthens SP to Shibboleth (using OA Federation): Deep Links

[Cantor, Scott]

On 1/27/16, 7:40 PM, "users on behalf of Manoj Kancharla" <users-bounces at shibboleth.net on behalf of manojk at silverchair.com> wrote:



>There are multiple clients using shibboleth and each of them as an ApplicationOverride. I'm not sure what the implications.

I can't tell you why you chose that approach, though. If you tell me why you think you need an override, I can tell you whether that's a use case for one. That's all I can do. The wiki also describes these issues at length in describing what that feature is for and what it's not needed for.

> We're closer to a deadline

If you want to keep using overrides, then you MUST create endpoints, in metadata, specific to every override. They can share one entityID, or not, but they're all required.

>Could you please elaborate on "carving things by path"?

Mapping resources to applicationId based on directories rather than vhosts, and having to set handlerURL specifically in each one. That's what I assume you did.

>How does "stop using endpoints" approach work?

Stop using the endpoints meant stop using overrides, same recommendation.

> Could you point me to any documentation?

https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPApplicationModel

-- Scott