Shibboleth SP for multiple domains

vadud3 at gmail.com vadud3 at gmail.com
Wed Jul 14 17:50:43 UTC 2021


On Wed, Jul 14, 2021 at 1:29 PM <vadud3 at gmail.com> wrote:

>
>
> On Wed, Jul 14, 2021 at 12:20 PM Cantor, Scott <cantor.2 at osu.edu> wrote:
>
>> (If you're asking how to multi-home it so the entityID varies with the
>> vhost, it's documented, see entityIDSelf.)
>>
>> That is a choice, not a necessity, Peter and I already covered that
>> question.
>>
>> -- Scott
>>
>
> Documentation says it is alternative to <ApplicationOverride>. I am
> already using <ApplicationOverride>.
>
> I am still learning the config, so pardon my ignorance.
>
> Do I need to remove the the <Host .. /> from <RequestMap>.. </RequestMap>
> since I am using Apache with ShibRequestSetting?
>
> Do I need to add ShibRequestSetting applicationId default for
> server.example.org vhost?
>
>
> This Fails and I get error
>
> https://node1.example.org/Shibbotleth.sso/Login?http://ssotest.example.org/adfs/services/trust
>
> This works, I get the login page
>
> https://server.example.org/Shibboleth.sso/Login?http://ssotest.example.org/adfs/services/trust
>
> Is that mean issue with IdP ?
>
>
>
I forgot the add entityID= to the links.

The links are
https://node1.example.org/Shibbotleth.sso/Login?entityID=http://ssotest.example.org/adfs/services/trust
<https://node1.example.org/Shibbotleth.sso/Login?http://ssotest.example.org/adfs/services/trust>

https://server.example.org/Shibboleth.sso/Login?entityID=http://ssotest.example.org/adfs/services/trust
<https://server.example.org/Shibboleth.sso/Login?http://ssotest.example.org/adfs/services/trust>



> --
>> For Consortium Member technical support, see
>> https://wiki.shibboleth.net/confluence/x/coFAAg
>> To unsubscribe from this list send an email to
>> users-unsubscribe at shibboleth.net
>>
>
>
> --
> Asif Iqbal
> PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu
> A: Because it messes up the order in which people normally read text.
> Q: Why is top-posting such a bad thing?
>
>

-- 
Asif Iqbal
PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20210714/8721e347/attachment.htm>


More information about the users mailing list