"Include" files for shibboleth2.xml?

[Cantor, Scott]

> Is it possible for the shibboleth2.xml file to "include" a directory
> (something like /etc/shibboleth2.d/ maybe) were we could place
> multiple application override files, one per IdP configured for use
> with our SP?

You almost certainly do not need overrides, and if you do you should rethink what you're doing, but yes, within some limits.

https://wiki.shibboleth.net/confluence/display/SP3/ExternalApplicationOverrides

Within the very limited scope of what you described, there is no need for an override to support multiple IdPs and a lot of reasons not to go that way.

It's a way of looking at things that is required by commercial SAML implementations because they're broken in lacking proper support for federation. The SP is not, hence it does need that kind of approach and is very hostile to it by design.

-- Scott