> Right, which is why I'm saying that you're not asking about deploying two SPs > (you can't), but about protecting two web servers with one (you can). The > wiki documentation covers all of that. Forgot to paste link... https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPApplicationModel -- Scott