OpenAthens SP to Shibboleth (using OA Federation): Deep Links

[Cantor, Scott]

> Scott, I used a wrong term. Microsite is an internal lingo - they're actually sub
> domains with IIS bindings. This is not vhosting.

That is most assuredly vhosting. The question is whether it's also virtualization of the environment, and in this case it seems like it has to be, or the sites would already know their own names accurately. Or maybe you simply don't have the site names assigned in shibboleth2.xml correctly, but that seems like an obvious sort of mistake.

Regardless the simple fact is the request by the browser to the URL specified in the AuthnRequest after the login is not a site that believes its identity matches the URL.
 
-- Scott