<div dir="ltr"><div>I have configured work of my first web application (context '/') with shibboleth idp v3 - all is ok.</div><div>Now I try to integrate the same behavior to second application (context '/web') and want SSO to get worked.</div><div><br></div><div>I work with file-based SP-metadata, which configured in metadata-providers.xml:</div><div><div><font color="#3d85c6"><MetadataProvider </font></div><div><font color="#3d85c6"><span class="" style="white-space:pre">               </span>xmlns="urn:mace:shibboleth:2.0:metadata"</font></div><div><font color="#3d85c6"><span class="" style="white-space:pre">              </span>xmlns:xsi="<a href="http://www.w3.org/2001/XMLSchema-instance">http://www.w3.org/2001/XMLSchema-instance</a>"</font></div><div><font color="#3d85c6"><span class="" style="white-space:pre">           </span>xsi:schemaLocation="urn:mace:shibboleth:2.0:metadata <a href="http://shibboleth.net/schema/idp/shibboleth-metadata.xsd">http://shibboleth.net/schema/idp/shibboleth-metadata.xsd</a>"</font></div><div><font color="#3d85c6"><span class="" style="white-space:pre">           </span>xsi:type="FilesystemMetadataProvider"</font></div><div><font color="#3d85c6"><span class="" style="white-space:pre">         </span>id="LocalMetadata"</font></div><div><font color="#3d85c6"><span class="" style="white-space:pre">            </span>failFastInitialization="true"</font></div><div><font color="#3d85c6"><span class="" style="white-space:pre">         </span>metadataFile="%{idp.home}/metadata/urntestpshashkoklimovsk_sp-test-localhost.xml"/></font></div></div><div><br></div><div>I try to use the same sp metadata file for second app, but after succes response from idp I forwarded to page <b><a href="http://localhost/saml/SSO">http://localhost/saml/SSO</a>. </b>I find this address in SP-metadata file: </div><div><div><font color="#3d85c6"><md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"</font></div><div><font color="#3d85c6">                                     Location="<a href="http://localhost:80/saml/SSO">http://localhost:80/saml/SSO</a>" index="0" isDefault="true"/></font></div><div><font color="#3d85c6">        <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact"</font></div><div><font color="#3d85c6">                                     Location="<a href="http://localhost:80/saml/SSO">http://localhost:80/saml/SSO</a>" index="1"/></font></div></div><div><font color="#3d85c6"><br></font></div><div><font color="#000000">but I think, that for my second app with another context this address must be <b><a href="http://localhost:80/web/saml/SSO">http://localhost:80/web/saml/SSO</a></b>. right?</font></div><div><br></div><div>I have created new sp metadata file with suffix 2 at the end with changed address and add another block to metadata-providers.xml:</div><div><div><font color="#3d85c6"><MetadataProvider </font></div><div><font color="#3d85c6"><span class="" style="white-space:pre">         </span>xmlns="urn:mace:shibboleth:2.0:metadata"</font></div><div><font color="#3d85c6"><span class="" style="white-space:pre">              </span>xmlns:xsi="<a href="http://www.w3.org/2001/XMLSchema-instance">http://www.w3.org/2001/XMLSchema-instance</a>"</font></div><div><font color="#3d85c6"><span class="" style="white-space:pre">           </span>xsi:schemaLocation="urn:mace:shibboleth:2.0:metadata <a href="http://shibboleth.net/schema/idp/shibboleth-metadata.xsd">http://shibboleth.net/schema/idp/shibboleth-metadata.xsd</a>"</font></div><div><font color="#3d85c6"><span class="" style="white-space:pre">           </span>xsi:type="FilesystemMetadataProvider"</font></div><div><font color="#3d85c6"><span class="" style="white-space:pre">         </span>id="LocalMetadata"</font></div><div><font color="#3d85c6"><span class="" style="white-space:pre">            </span>failFastInitialization="true"</font></div><div><font color="#3d85c6"><span class="" style="white-space:pre">         </span>metadataFile="%{idp.home}/metadata/urntestpshashkoklimovsk_sp-test-localhost2.xml"/></font></div></div><div><font color="#3d85c6"><br></font></div><div><font color="#000000">but after this both applications stop working...</font></div><div><b>what should I do for second app to get SSO worked?</b></div><div><b><br></b></div><div>Thanks,</div><div>Pavel</div></div>