OpenAthens SP to Shibboleth (using OA Federation): Deep Links

[Manoj Kancharla]

Scott, in Shibboleth2.xml, we have one entry for <Site> and <Host> respectively. Are you suggesting I add <Host> node for each sub-domain?

<Site id="5" name="amadev.silverchair.com" scheme="https" port="443"/>  
<Host name="amadev.silverchair.com" applicationId="amaDev" authType="shibboleth" requireSession="false" />

Thanks

Manoj

-----Original Message-----
From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: Thursday, January 28, 2016 10:37 AM
To: Shib Users
Subject: RE: OpenAthens SP to Shibboleth (using OA Federation): Deep Links

> Scott, I used a wrong term. Microsite is an internal lingo - they're 
> actually sub domains with IIS bindings. This is not vhosting.

That is most assuredly vhosting. The question is whether it's also virtualization of the environment, and in this case it seems like it has to be, or the sites would already know their own names accurately. Or maybe you simply don't have the site names assigned in shibboleth2.xml correctly, but that seems like an obvious sort of mistake.

Regardless the simple fact is the request by the browser to the URL specified in the AuthnRequest after the login is not a site that believes its identity matches the URL.
 
-- Scott

--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net