IIS and Shibboleth SP

[Cantor, Scott]

You're going to have to define "application" but the SP's definition of that is the app override feature, and the answer is "yes, and you should never do it" and most use cases don't require it.

Separate apps should always be separate vhosts anyway because that's simply how the web works, same-origin policy is not path-based.

If that ever was a problem, it ended when certs became free and SNI became widespread. Extra vhosts are free now.

-- Scott