Shibboleth SP for multiple domains
Peter Schober
peter.schober at univie.ac.at
Wed Jul 7 09:36:46 UTC 2021
* vadud3 at gmail.com <vadud3 at gmail.com> [2021-07-06 23:19]:
> We’ve tried following the following two links / options, but couldn’t
> get it working:
>
> https://wiki.cac.washington.edu/pages/viewpage.action?pageId=61703128
>
> https://wiki.cac.washington.edu/pages/viewpage.action?pageId=28939166
[...]
> We are looking to see if we are going down the right path. Which
> option should we be trying to complete? Should we be trying to do
> this under 1 entityID or use separate entityIDs for each site that we
> have?
1. Contrary to popular belief "couldn't get it working" is not a
technical error description that would enable anyone to help you solve
your problem.
2. Those instructions are not from the official software documentation
(which doesn't mean they're bad) and expecting people to read 3rd
party documentation only to help you fix a problem you haven't even
described is asking a bit much, IMO.
3. Only you can know whether one entityID will suffice for your use
case or not. Of course you also don't mention anything about the
number or kind of services so it's impossible for anyone else to say.
Follwing Occam's razor a single one should suffice unless you *know*
your use case requires multiple.
(If the IDPs need to be able to differentiate those logical SPs in
order to apply differing policies then you'll likely need multiple
entityIDs for the logical SPs. If you can get away without that avoid
it, of course.)
-peter
More information about the users
mailing list