Hi Nate,<div><br></div><div>Actually i'm new to SAML implementation due to that i don't know how to deploy the separate SAML SP's for each sub domain, if you don't mind can you provide little bit more guide on that.</div>
<div><br></div><div>I forgot to mention one point here our platform is windows. </div><div>I'm totally confused with applicationoverride, please clarify my doubt regarding this.</div><div><br></div><div>1) site name : shall i specify it as <a href="http://xxxx.com">xxxx.com</a> or <a href="http://sp.xxxx.com">sp.xxxx.com</a></div>
<div>2) if i specify site name as a <a href="http://sp.xxxx.com">sp.xxxx.com</a> then is it necessary configure <a href="http://sp.xxxx.com">sp.xxxx.com</a> in application default section</div><div>3) is there any specific pattern for the host name to use them in the applicationoverride?</div>
<div>4) please classify applicationdefault and applicationoverride based our requirement</div><div><br></div><div>-Raja</div><div><br><div class="gmail_quote">On Tue, Oct 30, 2012 at 11:21 PM, Nate Klingenstein <span dir="ltr"><<a href="mailto:ndk@internet2.edu" target="_blank">ndk@internet2.edu</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Raz,<br>
<br>
I think the easiest thing to do would be to just deploy separate SAML SP's for each sub domain. Is there a reason why you couldn't do that?<br>
<br>
Otherwise, a combination of appropriate session initiation and application overrides would allow a single SP to protect each subdomain in a distinct fashion.<br>
<br>
<a href="https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPApplicationOverride" target="_blank">https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPApplicationOverride</a><br>
<a href="https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPServiceSSO" target="_blank">https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPServiceSSO</a><br>
<br>
Thanks,<br>
Nate.<br>
<div><div class="h5"><br>
On 30 Oct 2012, at 17:45, "Raz's" <<a href="mailto:gajula.rajashekhar@gmail.com">gajula.rajashekhar@gmail.com</a>> wrote:<br>
<br>
> Hi All,<br>
><br>
> Please help me out in the process of SAML SP implementation for sub domains. This implementation little bit tricky here single application providing the solutions or our clients using the sub domains so each sub domain indicates the individual client and also each client had the his own idp and sp but we want to integrate their idp into our sp at the same it has to redirect the request to respected sub domains (clients) idp. Here Session of each and every sub domain (client) should be vary based on the sub domain(client) idp.<br>
><br>
> So kindly provide me some guide lines to implement this case study.<br>
><br>
><br>
</div></div>> --<br>
> To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</blockquote></div><br></div>