<div dir="ltr">I am currently running a 2.5.3 SP on Apache that handles requests from multiple subdomains (<a href="http://a.example.com">a.example.com</a>, <a href="http://b.example.com">b.example.com</a> and <a href="http://c.example.com">c.example.com</a>). All the session initiation is started by sending the users to the "/login" path like this:<div>
<br></div><div><div><Location /login></div><div> AuthType shibboleth</div><div> ShibRequestSetting requireSession On</div><div> require valid-user</div><div></Location></div></div><div><br></div><div>I have multiple IdPs but they are each only valid for one of the subdomains. Is there some way to force an IdP based on the domain without prompting the user?</div>
<div><br></div><div>I tried setting the entityID query string parameter but that doesn't seem to propagate through the Apache location. e.g. <a href="https://a.example.com/login?entityID=https%3A%2F%2Ffoo">https://a.example.com/login?entityID=https%3A%2F%2Ffoo</a></div>
<div><br></div><div>Calling the Shibboleth.sso/Login path directly with the query string takes me to the correct IdP but then doesn't return me to my /login location.</div><div><br></div><div>Thanks.</div><div>Ted</div>
<div><br></div></div>