<div dir="ltr"><div style>Nate and Scott,</div><div style>Thanks for your help.</div><div style><br></div>I have 3 different <span style="font-family:arial,sans-serif;font-size:12.666666984558105px">entityIDs configured as application override in shibboleth2.xml:</span><div>
<div style="font-family:arial,sans-serif;font-size:12.666666984558105px"><br></div><div><font face="courier new, monospace" size="1"><ApplicationOverride id="usyd" entityID="<a href="http://usyd.dev-02.sinapti.co/shibboleth">http://usyd.dev-02.sinapti.co/shibboleth</a>"/></font></div>
<div><font face="courier new, monospace" size="1"><ApplicationOverride id="uws" entityID="<a href="http://uws.dev-02.sinapti.coi/shibboleth">http://uws.dev-02.sinapti.coi/shibboleth</a>"/></font></div>
<div><font face="courier new, monospace" size="1"><ApplicationOverride id="unsw" entityID="<a href="http://unsw.dev-02.sinapti.co/shibboleth">http://unsw.dev-02.sinapti.co/shibboleth</a>"/></font></div>
<div style="font-family:arial,sans-serif;font-size:12.666666984558105px"><br></div><div style="font-family:arial,sans-serif;font-size:12.666666984558105px">The application default use other EntityID (<a href="http://dev-02.sinapti.co">dev-02.sinapti.co</a>).</div>
<div style="font-family:arial,sans-serif;font-size:12.666666984558105px">And the IdP is:</div><div><font face="courier new, monospace" size="1"><MetadataProvider type="XML" uri="<a href="http://www.testshib.org/metadata/testshib-providers.xml">http://www.testshib.org/metadata/testshib-providers.xml</a>" backingFilePath="testshib-two-idp-metadata.xml" reloadInterval="180000"/><br>
</font></div><div><font face="arial, sans-serif"><span style="font-size:12.666666984558105px"><br></span></font></div><div style><font face="arial, sans-serif"><span style="font-size:12.666666984558105px">And for example, the Vhost for usyd is:</span></font></div>
<div style><span style="font-family:'courier new',monospace;font-size:x-small"><VirtualHost *:443></span><br></div><div style><div><font face="courier new, monospace" size="1"> SSLEngine on</font></div>
<div><font face="courier new, monospace" size="1"> ServerName <a href="http://usyd.dev-02.sinapti.co">usyd.dev-02.sinapti.co</a></font></div><div><font face="courier new, monospace" size="1"> ServerAdmin admin email</font></div>
<div><font face="courier new, monospace" size="1"> ProxyPass /TestSPSinaptico ajp://<a href="http://usyd.dev-02.sinapti.co:8009/TestSPSinaptico">usyd.dev-02.sinapti.co:8009/TestSPSinaptico</a></font></div><div><font face="courier new, monospace" size="1"> ProxyPassReverse /TestSPSinaptico ajp://<a href="http://usyd.dev-02.sinapti.co:8009/TestSPSinaptico">usyd.dev-02.sinapti.co:8009/TestSPSinaptico</a></font></div>
<div><font face="courier new, monospace" size="1"> SSLCertificateFile path to apache pem</font></div><div><font face="courier new, monospace" size="1"> SSLCertificateKeyFile path to apache key</font></div><div>
<font face="courier new, monospace" size="1"> DocumentRoot path to folder</font></div><div><font face="courier new, monospace" size="1"> <Location / ></font></div><div><font face="courier new, monospace" size="1"> AuthType shibboleth</font></div>
<div><font face="courier new, monospace" size="1"> ShibRequestSetting requireSession 1</font></div><div><font face="courier new, monospace" size="1"> ShibRequestSetting applicationId usyd</font></div>
<div><font face="courier new, monospace" size="1"> ShibUseHeaders Off</font></div><div><font face="courier new, monospace" size="1"> require valid-user</font></div><div><font face="courier new, monospace" size="1"> </Location></font></div>
<div><font face="courier new, monospace" size="1"></VirtualHost></font></div></div><div style><font face="arial, sans-serif"><span style="font-size:12.666666984558105px"><br></span></font></div><div style><font face="arial, sans-serif"><span style="font-size:12.666666984558105px">In tomcat I have only one application for all the universities. </span></font><span style="font-family:arial,sans-serif;font-size:12.666666984558105px">This configuration works fine.</span></div>
<div style><font face="arial, sans-serif"><span style="font-size:12.666666984558105px"><br></span></font></div><div style><font face="arial, sans-serif"><span style="font-size:12.666666984558105px">For now, we are going to work with 3 universities only. </span></font></div>
<div style><font face="arial, sans-serif"><span style="font-size:12.666666984558105px">I don't know how to set apache request map to don't use DS. Please, could you tell me how?</span></font></div><div style><font face="arial, sans-serif"><span style="font-size:12.666666984558105px">Thanks</span></font></div>
<div style><font face="arial, sans-serif"><span style="font-size:12.666666984558105px">Mariela</span></font></div><div style="font-family:arial,sans-serif;font-size:12.666666984558105px"><br></div></div></div><div class="gmail_extra">
<br><br><div class="gmail_quote">On Tue, Apr 30, 2013 at 1:17 PM, Cantor, Scott <span dir="ltr"><<a href="mailto:cantor.2@osu.edu" target="_blank">cantor.2@osu.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div class="im">On 4/30/13 12:07 PM, "Nate Klingenstein" <<a href="mailto:ndk@internet2.edu">ndk@internet2.edu</a>> wrote:<br>
><br>
>You will need to treat each application as its own logically distinct<br>
>application.<br>
> Each will need its own entityID. Once you have entityID different for<br>
>each application, attribute release can be configured for every<br>
>application discretely.<br>
<br>
</div>That's a different issue and wasn't mentioned in the original question. If<br>
the use case is dispatching to different IdPs and that's all, you don't<br>
need anything like that, simply add an entityID as a request setting via<br>
Apache command or in the RequestMap in a <Host> element.<br>
<br>
But do not do this if your set of IdPs is large. 3 is one thing, but 300<br>
is not workable. Just accept that federation and discovery go hand in hand.<br>
<br>
-- Scott<br>
<br>
<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</blockquote></div><br></div>