Can you run multiple instances of Shibboleth for SP?

chad phillips chad at chadphillips.org
Mon Jul 1 01:17:55 EDT 2019


Thank you for the reply. I should have been clearer with my question :)

My setup is
DomainA.com with SP A (using Shiboleth).  The IDP is Salesforce.
DomainB.com with SP B (using Shiboleth). The IDP is Azure.

I already have setup DomainA.com with SP A (using Shiboleth).  The IDP
is Salesforce.

So my question is can I use the same instance of Shiboleth for
DomainB.com, SP B, but it will be using a different IDP.

>From Scott's reply, I believe what I want to do is possibl.  Is this
what I need to be looking at?
https://wiki.shibboleth.net/confluence/display/SP3/ApplicationOverride#ApplicationOverride-MetadataforaNewSP

thanks


> From: Les LaCroix <llacroix at carleton.edu>
> To: Shib Users <users at shibboleth.net>
> Subject: Re: Can you run multiple instances of Shibboleth for SP?
> Message-ID:
>         <CA+0uUd-Fqn1_RVyaaDBikyoVscc-nJkOCOUO2jtGBj+MG9Cc3Q at mail.gmail.com>
> Content-Type: text/plain; charset="utf-8"
>
> >
> > You cannot run multiple instances, nor is that necessary for anything
> > you're asking about.
>
>
> I interpreted the question differently, with the focus being on whether or
> not one linux server could run independent IdPs.  I've run multiple IdPs
> behind one httpd, so I expected the answer was "yes".  :-)  I don't see why
> one cannot host separate IdPs for RoboSquirrels.biz and ThreeWalnuts.org on
> the same linux server as virtual hosts behind an Apache httpd.
>
> In our case, the IdPs were separate development instances of the same
> production service, so none of them were production.  Maybe something would
> have broken under load?  I can't think of what it would be.  Anyway, all of
> the IdPs were in separate installation directories
> (/home/<user>/shibboleth-idp/), but I expect it would behave the same if
> they were installed in /opt/shibboleth-idp/robosquirrels/ and
> ../threewalnuts/.
>
> It begs the question of whether or not that's really what you need or want
> to do, though.  Good luck!  -Les


More information about the users mailing list