Question about use of ApplicationOverride

[Nate Klingenstein]

Amos,

You can use local paths for ApplicationOverrides but you can't in your metadata.  You need the full endpoint in the metadata for redirect and security check purposes.

You could construct some script that just inserts an additional endpoint to your metadata, but as metadata was intended to be a description of the SP, it's largely external from the SP, and it was intended to be manually curated.

You may also be using the /Shibboleth.sso/Metadata generator to make production metadata for your partners, which is not intended for several good reasons.

https://wiki.shibboleth.net/confluence/display/SP3/Metadata+Generation+Handler

Hope this helps answer your question,
Nate.