Hi,<div><br></div><div>I have setup Shibboleth SP on apache. I am using the same entityID for 2 different FQDN. For instance: <a href="http://www.domain.com">www.domain.com</a> and <a href="http://www.domain.org">www.domain.org</a>.</div>
<div>In order to make it works, I have modified the metadata part in my shibboleth2.xml:</div><div><div> <Handler type="MetadataGenerator" Location="/Metadata.xml" signing="false"></div>
<div> <span class="Apple-tab-span" style="white-space:pre"> </span><EndpointBase><a href="https://www.domain.com/Shibboleth.sso">https://www.domain.com/Shibboleth.sso</a></EndpointBase></div><div> <span class="Apple-tab-span" style="white-space:pre"> </span><EndpointBase><a href="https://www.domain.org/Shibboleth.sso">https://www.domain.org/Shibboleth.sso</a></EndpointBase></div>
<div> </Handler></div></div><div><br></div><div>The login part works like a charm.</div><div><br></div><div>My problem is the logout.</div><div>When I connect to <a href="http://www.domain.org">www.domain.org</a>, I get a cookie for <a href="http://www.domain.org">www.domain.org</a>.</div>
<div>But when a LogoutRequest is sent to this SP, it is sent to the first endpoint: <a href="https://www.domain.com/Shibboleth.sso/logout">https://www.domain.com/Shibboleth.sso/logout</a>.</div><div>The session cookie is missing and Shibboleth is responding an Error : unknown principal.</div>
<div><br></div><div>Is there a way to make this configuration, 2 domains/1 entityID, works?</div><div>Is there a way that Shibboleth destroys the corresponding session of the LogoutRequest, session pointed out by a random Id and a principal, wihtout throwing an error?</div>
<div><br></div><div>Thanks for your help,</div><div><br></div><div>Yannick</div>