<div dir="ltr"><div>Hello everyone,<br><br></div>Here's my set-up:<br><ul><li>I have a web site <a href="http://siteB">http://siteB</a> running correctly and is protected by Shibboleth (SAML)</li><li>I want to add <a href="http://siteA">http://siteA</a> that will have the same content as siteB and should have the same protection from Shibboleth.</li></ul><p>For doing this, I tried to use rewriting URLs and so I put on my httpd.conf:</p><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><p>  RewriteEngine on<br>  RewriteRule "^/?(.*)" "<a href="https://siteB/$1">https://siteB/$1</a>" [P]<br></p></blockquote><p>Also I added the shibboleth part:</p><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><p>  <Location /group><br>     AuthType shibboleth<br>     ShibRequestSetting requireSession 1<br>     ShibRequireSession On<br>      require shib-session<br>   </Location><br>   <Location /Shibboleth.sso><br>     Satisfy Any<br>     Allow from all<br>   </Location><br>   <Location /><br>       AuthType shibboleth<br>       Require shibboleth<br>       ShibRequestSetting applicationId default<br>       ShibUseHeaders On<br>       ShibRequestSetting entityID <a href="https://fidm.gigya.com/saml/v2.0/3__Cx8VL7TahLZ899qp_v61mtJzr5-u_AMPsfwAA4xptlhsCM_uJo1xC_KOi8Jua2k">https://fidm.gigya.com/saml/v2.0/3__Cx8VL7TahLZ899qp_v61mtJzr5-u_AMPsfwAA4xptlhsCM_uJo1xC_KOi8Jua2k</a><br>       ShibRequestSetting requireSession false<br>   </Location><br></p></blockquote><div>The problem that I got is that Shibboleth thinks that I'm trying to spoof his cookies when I access the URL <a href="http://siteA">http://siteA</a>. <br><br></div><div>So what I should do for my case?<br><br></div><div>Thank you <br></div></div>