SP Metadata Question
Mr. Christopher Bland
chris at fdu.edu
Fri Mar 22 20:27:33 EDT 2019
Hi All,
I recently started working with a vendor who has InCommon metadata. What’s weird to me is that they have metadata that includes a single entityID, a single cert and ACSs with different domains.
<md:AssertionConsumerService xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" index="1" Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://hosta.example.com//Shibboleth.sso/SAML2/POST"/>
<md:AssertionConsumerService xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" index="2" Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://hostb.example.com/Shibboleth.sso/SAML2/POST"/>
<md:AssertionConsumerService xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" index="3" Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://completely.different.domain/Shibboleth.sso/SAML2/POST”/>
I was under the impression that if I wanted to have a single SP handle multiple domains I would need to do application overrides for each of the hosts. Thought this might solve a problem I have where I have built a multisite subdomain Wordpress server that does domain mapping for individual blogs/sites. The SPv3 ApplicationOverridedocs section mentions host based vs path based overrides but it’s unclear to me how I create metadata for my IDP to recognize all of the ApplicationOverride URLs. I am wondering if this is what the vendor is doing.
I appreciate any thoughts,
-Chris
More information about the users
mailing list