ShibbolethSP+ADFS and vhosts

Peter Schober peter.schober at
Thu Feb 15 14:16:40 EST 2018

* Gahring, David A <gahringd at> [2018-02-15 19:27]:
> As for the multiple entityID's, you are correct (I think).  We have
> a single relying party defined on the ADFS side, and were hoping to
> be able to make that work since logically it's the same application
> since each of the vhosts defined on the Apache web server redirect
> to identical Tomcat servers running the same application code.

If that's one big logical service make it one big service.

Why would you multiply those SPs when they're all just proxies to a
bunch of Tomcats, instead of stopping to multiply the web servers'
names/vhosts? Use the same approach to load balance access to the load
balancers (your web servers, here) is what I'm saying, I think.


More information about the users mailing list