Shibboleth SP for multiple domains

[Cantor, Scott]

"I need to occasionally directly access a server node" is not a use case for anything but one entityID and one server name, period.

The best way to test a node is /etc/hosts and just fake it on the client so you need do nothing else at all.

The second best answer is to add extra endpoints to the metadata with all of the server-specific endpoints required for the occasional test but that's not really practical because the servers themselves would have to magically know when to use their own hostnames instead of the virtual one, and there's no easy way to do that, though that's possible with enough work.

Which brings us back to using /etc/hosts on the client when you have to reference a specific server. You're taking a simple client trick and making it the server's problem. Just don't do that and you're done.

You shouldn't be going anywhere near the ApplicationOverride feature and the documentation does nothing but warn you not to. It has absolutely nothing to do with your use case and won't solve any problem you're trying to solve, while adding about a dozen more.

-- Scott