Question about use of ApplicationOverride
ndk at signet.id
Mon Apr 15 15:24:35 EDT 2019
You can use local paths for ApplicationOverrides but you can't in your metadata. You need the full endpoint in the metadata for redirect and security check purposes.
You could construct some script that just inserts an additional endpoint to your metadata, but as metadata was intended to be a description of the SP, it's largely external from the SP, and it was intended to be manually curated.
You may also be using the /Shibboleth.sso/Metadata generator to make production metadata for your partners, which is not intended for several good reasons.
Hope this helps answer your question,
More information about the users