Metadata configuration for multiple SPs
Peter Schober
peter.schober at univie.ac.at
Mon Nov 14 05:59:25 EST 2016
* Alexander Ivanov <alex at calmforce.com> [2016-11-14 09:32]:
> We have two separate working configurations for two applications to
> authenticate against our Shibboleth IdP, and would now like to configure
> our IdP to work simultaneously for both.
>
> I found these two posts relevant:
The documentation is always relevant:
https://wiki.shibboleth.net/confluence/display/IDP30/MetadataConfiguration
You can have multiple MetadataProviders (each loading as little or as
many entities as you want). Or you can put multiple EntityDescriptor
elements (i.e., metadata for a single entity) into a shared file
within an EntitiesDescriptor element and load that within a single
MetadataProviders. An example for the latter could look like:
<EntitiesDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata"
Name="https://example.org/local-entities">
<!-- individual EntityDescriptor elements go here, one for each SP -->
</EntitiesDescriptor>
HTH,
-peter
More information about the users
mailing list