Shibboleth SP for multiple domains

[vadud3 at gmail.com]

On Thu, Jul 8, 2021 at 3:06 PM Cantor, Scott <cantor.2 at osu.edu> wrote:

> On 7/8/21, 2:55 PM, "users on behalf of vadud3 at gmail.com" <
> users-bounces at shibboleth.net on behalf of vadud3 at gmail.com> wrote:
>
> >    I am still looking for some suggestions on this.
>
> The SP runs on any domains you host it on out of the box, provided you add
> the necessary endpoints to the metadata so that the requested response
> locations are accepted by the IdP. Any problems you have are likely due to
> invalid metadata given to the IdP missing the necessary endpoints.
>
> -- Scott
>
>
I compared the metadata of
https://server.example.org/Shibboleth.sso/Metadata with
https://node1.example.org/Shibboleth.sso/Metadata and they both have the
same
entityID https://server.example.org.

However, the Location for server.example.org is https://server.example.org
and for node1.example.org is https://node1.example.org

Does that make sense of the same entityID for both? I can then send the
metadata from node1 to the IdP admin team.

I think with my previous config the entityID for node1 was
https://node1.example.org/shibboleth (not sure how it appended shibboleth
in there) and that has been failing.


> --
> For Consortium Member technical support, see
> https://wiki.shibboleth.net/confluence/x/coFAAg
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>


-- 
Asif Iqbal
PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20210709/0064ad5b/attachment.htm>