<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal">I am setting up a linux sp that will have some sites needing single factor and other requiring 2fa step up. The stumbling block im running into is this application will have way too many url combinations to list and I am trying to find
a way to either wildcard a path with */test etc or some other form of shortcut. <o:p>
</o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">For example the url I am needing to setup the override for is
<a href="https://testsp.test.org/123/testenv/employee/ab/cd/">https://testsp.test.org/123/testenv/employee/ab/cd/</a> . the static bits in all the variations are hostname and “/testenv/employee”. The path /123/ has one other variation of /456/ but the later
paths can be a long list of options and various path depth of 2-4 layers deep. <o:p>
</o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">So in short is there a way to wildcard the handlerurl and various metadata urls needed for the applicationoverride such that we can avoid having to be explicit in the path for however many variations there are for example: https://testsp.test.org/*/testenv/employee/*/Shibboleth.sso<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">My example in context of the applicationoverride:<o:p></o:p></p>
<p class="MsoNormal"><!-- Step-up 2-factor --><o:p></o:p></p>
<p class="MsoNormal"><ApplicationOverride id="stepup2f"><o:p></o:p></p>
<p class="MsoNormal"> <Sessions lifetime="28800" timeout="3600" handlerURL="/*/testenv/EMPLOYEE/*/Shibboleth.sso" handlerSSL="true" cookieProps="https><o:p></o:p></p>
<p class="MsoNormal"> <SessionInitiator type="Chaining" Location="/stepup2fa" isDefault="false" id="utds2fa" relayState="cookie" authnContextClassRef="duo"><o:p></o:p></p>
<p class="MsoNormal"> <SessionInitiator type="SAML2" template="bindingTemplate.html"/><o:p></o:p></p>
<p class="MsoNormal"> </SessionInitiator><o:p></o:p></p>
<p class="MsoNormal"> </Sessions><o:p></o:p></p>
<p class="MsoNormal"></ApplicationOverride><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Any direction or examples or a flat out no you cant do that would be appreciated.<o:p></o:p></p>
</div>
</body>
</html>