IIS and Shibboleth SP

Cantor, Scott cantor.2 at osu.edu
Fri Sep 17 15:17:24 UTC 2021

You're going to have to define "application" but the SP's definition of that is the app override feature, and the answer is "yes, and you should never do it" and most use cases don't require it.

Separate apps should always be separate vhosts anyway because that's simply how the web works, same-origin policy is not path-based.

If that ever was a problem, it ended when certs became free and SNI became widespread. Extra vhosts are free now.

-- Scott

More information about the users mailing list