Accessing 2 websites within Shibboleth

[Peter Schober]

* Woelfel, Ed <ed.woelfel at westernsouthernlife.com> [2016-03-04 15:07]:
> We currently have Shibboleth passing information to our Idp for SSO.
> I think we are using this for just one site.  We would like to add
> additional sites.  Again, since this is new to me I don't even know
> if it is feasible.

Try the documentation, home for the Shib SP:
https://wiki.shibboleth.net/confluence/display/SHIB2/
-> "Configure"
https://wiki.shibboleth.net/confluence/display/SHIB2/Configuration
-> "Talk to a New Identity Provider"
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPAddIdP

> Example: firstwebsite.app.net works just fine with Single Sign-on.
> When I try adding secondwebsite.app.net it fails.

That could mean several things: Do you want to add another
organization from where people should log in to your existing service?
Then the above covers that.

Or do you want to add another application or vhost to your existing
installation, to be used by the same IDP(s) currentiyl accessing your
application?

> I am trying to figure out how to get this to work.  I have modified Shibboleth2.xml, created an additional SP-Metadat, but nothing has worked.
> I am consistently getting the following error when trying to access the additional website:
>                 Opensaml::saml2md::MetadataException
>                 The system encountered an error at Fri Mar 4 08:48:40 2016
>                 opensaml::saml2md::MetadataException at (https://secondwebsite.app.net/fulfillment/ssolandingpage)
>             Unable to locate metadata for identity provider (https://secondwebsite.app.net/shibboleth)

This error would be the result of trying to add another authentication
server (IDP) to your service. If you instead want to add another vhost
the details depend on the web server used, and the intended or
acceptable isolation between the new server(name) and the existing
one.
-peter