<div dir="ltr">Hi all,<div>on our IdP&#39;s metadata we have currently configured two SPs (&quot;<a href="https://hostA/shibboleth">https://hostA/shibboleth</a>&quot;</div><div>and &quot;<a href="https://hostB/shibboleth">https://hostB/shibboleth</a>&quot;) which share a same AssertionConsumerService entry.</div>
<div>It&#39;s working, I&#39;m not now evaluating if this is the best solution and why it has been done,</div><div>my concern is about formal correctness. I&#39;m afraid that it&#39;s not and that sooner</div><div>or later we could run into problems. Is this solution fine or should we avoid it?</div>
<div>Thanks a lot,</div><div>Stefano</div><div><br></div><div><br></div><div><div>&lt;md:EntityDescriptor ... entityID=&quot;<a href="https://hostA/shibboleth">https://hostA/shibboleth</a>&quot;&gt;<br></div><div>...</div>
<div>...</div><div>&lt;md:AssertionConsumerService</div><div>Binding=&quot;urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST&quot;       </div><div>Location=&quot;<a href="https://hostA/Shibboleth.sso/SAML2/POST">https://hostA/Shibboleth.sso/SAML2/POST</a>&quot;<br>
</div><div>index=&quot;0&quot;/&gt;<br></div><div><div>&lt;md:AssertionConsumerService</div><div>Binding=&quot;urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST&quot;       </div><div>Location=&quot;<a href="https://hostC/Shibboleth.sso/SAML2/POST">https://hostC/Shibboleth.sso/SAML2/POST</a>&quot;<br>
</div><div>index=&quot;1&quot;/&gt;</div></div><div>...</div><div>&lt;/md:EntityDescriptor&gt;<br></div><div><br></div><div><div>&lt;md:EntityDescriptor ... entityID=&quot;<a href="https://hostB/shibboleth">https://hostB/shibboleth</a>&quot;&gt;<br>
</div><div>...</div><div>...</div><div>&lt;md:AssertionConsumerService</div><div>Binding=&quot;urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST&quot;       </div><div>Location=&quot;<a href="https://hostB/Shibboleth.sso/SAML2/POST">https://hostB/Shibboleth.sso/SAML2/POST</a>&quot;<br>
</div><div>index=&quot;0&quot;/&gt;<br></div><div><div>&lt;md:AssertionConsumerService</div><div>Binding=&quot;urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST&quot;       </div><div>Location=&quot;<a href="https://hostC/Shibboleth.sso/SAML2/POST">https://hostC/Shibboleth.sso/SAML2/POST</a>&quot;<br>
</div><div>index=&quot;1&quot;/&gt;</div></div><div>...</div><div>&lt;/md:EntityDescriptor&gt;</div></div></div></div>