Shibboleth service provider for multiple websites

[asikbcc]

I have following configuration for a website https://site1.example.com. After
the authentication is done the user is redirected to
https://site1.example.com/auth/shibboleth/callback. So far this is working
just fine. However, I need to configure shibboleth service provider for
another website  https://site2.example.com and after successful
authentication the user should be redirected to
https://site2.example.com/auth/shibboleth/callback. How can I do this?

    <SPConfig xmlns="urn:mace:shibboleth:2.0:native:sp:config"
              xmlns:conf="urn:mace:shibboleth:2.0:native:sp:config"
              xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"
              xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"  
              xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"
              clockSkew="180">
     
          
       <OutOfProcess logger="shibd.logger">
       </OutOfProcess>
     
       <InProcess logger="native.logger">
          <ISAPI normalizeRequest="true" safeHeaderNames="true">
             <Site id="1" name="site1.example.com"/>
          </ISAPI>
       </InProcess>
     
       <UnixListener address="shibd.sock"/>
     
       <RequestMapper type="Native">
           <RequestMap applicationId="default">
              <Host name="site1.example.com"/>
           </RequestMap>
        </RequestMapper>
     
       <ApplicationDefaults entityID="https://site1.example.com/shibboleth"
                            REMOTE_USER="eppn persistent-id targeted-id"
                            homeURL="site1.example.com"
                            signing="false"
                            encryption="false"
                            id="default"
                            policyId="default">
     
        <Sessions lifetime="28800"
                    timeout="3600"
                    checkAddress="false"
                    handlerURL="/Shibboleth.sso"
                    handlerSSL="true"
                    cookieProps="; path=/; secure; HttpOnly"
                   
exportLocation="http://localhost/Shibboleth.sso/GetAssertion"
                    exportACL="127.0.0.1"
                    idpHistory="false"
                    idpHistoryDays="7">
    
    
            <SSO entityID="https://login.example.com/shibboleth">
                SAML2
            </SSO>
     
     
             <SessionInitiator type="Chaining"
                               Location="/Login"
                               id="Intranet"
                               relayState="cookie"
                              
entityID="https://login.example.com/shibboleth"    
                              
target="https://site1.example.com/auth/shibboleth/callback">
            
                <SessionInitiator type="SAML2"
                                  acsIndex="1"
                                  template="bindingTemplate.html"/>
                                 
                <SessionInitiator type="Shib1"
                                  acsIndex="5"/>
             </SessionInitiator>
    
    
     
             <md:AssertionConsumerService Location="/SAML2/POST"
                                          index="1"
                                         
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"/>
             <md:AssertionConsumerService Location="/SAML2/POST-SimpleSign"
                                          index="2"
                                         
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign"/>
             <md:AssertionConsumerService Location="/SAML2/Artifact"
                                          index="3"
                                         
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact"/>
             <md:AssertionConsumerService Location="/SAML2/ECP"
                                          index="4"
                                         
Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS"/>
             <md:AssertionConsumerService Location="/SAML/POST"
                                          index="5"
                                         
Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post"/>
             <md:AssertionConsumerService Location="/SAML/Artifact"
                                          index="6"
                                         
Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01"/>
     
             <LogoutInitiator type="Chaining"
                              Location="/Logout"
                              relayState="cookie">
                <LogoutInitiator type="SAML2"
                                 template="bindingTemplate.html"/>
                <LogoutInitiator type="Local"/>
             </LogoutInitiator>
     
             <md:SingleLogoutService Location="/SLO/SOAP"
                                    
Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP"/>
             <md:SingleLogoutService Location="/SLO/Redirect"
                                     conf:template="bindingTemplate.html"
                                    
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"/>
             <md:SingleLogoutService Location="/SLO/POST"
                                     conf:template="bindingTemplate.html"
                                    
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"/>
             <md:SingleLogoutService Location="/SLO/Artifact"
                                     conf:template="bindingTemplate.html"
                                    
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact"/>
     
             <md:ManageNameIDService Location="/NIM/SOAP"
                                    
Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP"/>
             <md:ManageNameIDService Location="/NIM/Redirect"
                                     conf:template="bindingTemplate.html"
                                    
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"/>
             <md:ManageNameIDService Location="/NIM/POST"
                                     conf:template="bindingTemplate.html"
                                    
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"/>
             <md:ManageNameIDService Location="/NIM/Artifact"
                                     conf:template="bindingTemplate.html"
                                    
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact"/>
             <md:ArtifactResolutionService Location="/Artifact/SOAP"
                                           index="1"
                                          
Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP"/>
     
             <Handler type="MetadataGenerator"
                      Location="/Metadata"
                      signing="false"/>
     
             <Handler type="Status"
                      Location="/Status"
                      acl="127.0.0.1 134.130.3.70"/>
     
             <Handler type="Session"
                      Location="/Session"
                      showAttributeValues="false"/>
     
             <Handler type="DiscoveryFeed"
                      Location="/DiscoFeed"/>
          </Sessions>
     
     
         
          <Errors supportContact="example at example.com"
                  helpLocation="/about.html"
                  styleSheet="/shibboleth-sp/main.css"/>
              
          <MetadataProvider
            type="XML"
uri="https://sso.example.com/metadata/example.metadata.xml"
            backingFilePath="example.metadata.xml"
            reloadInterval="7200">
            <SignatureMetadataFilter certificate="sso.example.com.pem"/>
         </MetadataProvider>
             
          <TrustEngine type="Chaining">
             <TrustEngine type="ExplicitKey"/>
             <TrustEngine type="PKIX"/>
          </TrustEngine>
         
          <AttributeExtractor type="XML"
                              reloadChanges="false"
                              path="attribute-map.xml"/>
              
          <AttributeResolver type="Query"/>
     
          <AttributeFilter type="XML"
                           path="attribute-policy.xml"/>
     
     
          <CredentialResolver type="File"
                              key="/etc/ssl/private/xca_www.key"
                             
certificate="/etc/apache2/ssl/www-chain-2018.pem"/>
    
    
       </ApplicationDefaults>
    
    
          
       <SecurityPolicyProvider type="XML"
                               validate="true"
                               path="security-policy.xml"/>
     
       <ProtocolProvider type="XML"
                         validate="true"
                         reloadChanges="false"
                         path="protocols.xml"/>
     
    </SPConfig>



--
Sent from: http://shibboleth.1660669.n2.nabble.com/Shibboleth-Users-f1660767.html