SP 3 and reverseProxy

[Pascal Rigaux]

Jehan PROCACCIA <jehan.procaccia at tem-tsp.eu> a écrit :

> will I have to create an application ovveride for on the proxy SP  
> config for each of the web applications and then publish in the  
> federation metadata endpoint for all the web appplications ?
> before investing in it, I just want to be sure that it can be done  
> and that it does saves me the burden tu publish many metadata files  
> and specific configs for web applications that needs simple general  
> federated authN.

A way to save the burden of registration is to use the same vhost and  
host each applications in a specific path. But usually doing so is  
harder than the burden of registration...

A more complex way is to use a specific domain or subdomains, with  
cookie "domain" set in cookieProps to ensure sharing shibsession_*  
cookie:  
https://www.ibiblio.org/archive/2011/10/wordpress-multisite-plus-shibboleth/

As for us we prefer the burden of registration!
We sometimes share the same self signed public key for simplicity. So  
shibboleth2.xml is quite simple:

        <RequestMap applicationId="default">
             ...
             <Host authType="shibboleth"  
name="cours-cavej.univ-paris1.fr" applicationId="cours-cavej" />
        </RequestMap>

        ...
        <ApplicationOverride id="cours-cavej"  
entityID="https://cours-cavej.univ-paris1.fr" />

cu,

-- 
Pascal Rigaux