Accessing 2 websites within Shibboleth

[Woelfel, Ed]

Peter,
I am trying to use the same IDP to access another vhost.  I have setup the additional vhost in my ssl.conf file.  
BTW - If I turn SSO off for the application site a login screen appears.  When I turn it on I get the MetadataException error listed below.
Thanks.

-----Original Message-----
From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Peter Schober
Sent: Friday, March 04, 2016 9:40 AM
To: users at shibboleth.net
Subject: Re: Accessing 2 websites within Shibboleth

* Woelfel, Ed <ed.woelfel at westernsouthernlife.com> [2016-03-04 15:07]:
> We currently have Shibboleth passing information to our Idp for SSO.
> I think we are using this for just one site.  We would like to add 
> additional sites.  Again, since this is new to me I don't even know if 
> it is feasible.

Try the documentation, home for the Shib SP:
https://wiki.shibboleth.net/confluence/display/SHIB2/
-> "Configure"
https://wiki.shibboleth.net/confluence/display/SHIB2/Configuration
-> "Talk to a New Identity Provider"
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPAddIdP

> Example: firstwebsite.app.net works just fine with Single Sign-on.
> When I try adding secondwebsite.app.net it fails.

That could mean several things: Do you want to add another organization from where people should log in to your existing service?
Then the above covers that.

Or do you want to add another application or vhost to your existing installation, to be used by the same IDP(s) currentiyl accessing your application?

> I am trying to figure out how to get this to work.  I have modified Shibboleth2.xml, created an additional SP-Metadat, but nothing has worked.
> I am consistently getting the following error when trying to access the additional website:
>                 Opensaml::saml2md::MetadataException
>                 The system encountered an error at Fri Mar 4 08:48:40 2016
>                 opensaml::saml2md::MetadataException at (https://secondwebsite.app.net/fulfillment/ssolandingpage)
>             Unable to locate metadata for identity provider 
> (https://secondwebsite.app.net/shibboleth)

This error would be the result of trying to add another authentication server (IDP) to your service. If you instead want to add another vhost the details depend on the web server used, and the intended or acceptable isolation between the new server(name) and the existing one.
-peter
--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net