Metadata configuration for multiple SPs

Peter Schober peter.schober at univie.ac.at
Mon Nov 14 05:59:25 EST 2016


* Alexander Ivanov <alex at calmforce.com> [2016-11-14 09:32]:
> We have two separate working configurations for two applications to
> authenticate against our Shibboleth IdP, and would now like to configure
> our IdP to work simultaneously for both.
> 
> I found these two posts relevant:

The documentation is always relevant:
https://wiki.shibboleth.net/confluence/display/IDP30/MetadataConfiguration

You can have multiple MetadataProviders (each loading as little or as
many entities as you want). Or you can put multiple EntityDescriptor
elements (i.e., metadata for a single entity) into a shared file
within an EntitiesDescriptor element and load that within a single
MetadataProviders. An example for the latter could look like:

  <EntitiesDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata"
    Name="https://example.org/local-entities">
    
    <!-- individual EntityDescriptor elements go here, one for each SP -->
   
  </EntitiesDescriptor>

HTH,
-peter


More information about the users mailing list