<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Hello everyone, first time post here and I hope it makes sense.</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
We run Shibboleth SP 2.6.</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
We have an application that runs on a windows iis webserver (7)</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
The application is hosted on a single website in IIS but responds to multiple DNS names. All DNS names point to the same external IP</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<a href="https://st.website.com" id="LPlnk724950">https://st.website.com</a> </div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<a href="https://wt.wbsite.com" id="LPlnk417967">https://wt.website.com</a></div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Shibboleth2.xml contains the follwing</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<span> <InProcess logger="native.logger"><br>
</span>
<div> <ISAPI normalizeRequest="true" safeHeaderNames="true"><br>
</div>
<div> <Site id="1" name="st.website.com"/><br>
</div>
<div> </ISAPI><br>
</div>
<span> </InProcess></span><br>
</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<a href="https://st.website.com" id="LPlnk484941">https://st.website.com</a> is configured (and working with Okta IDP) for Company A. Staff can login via SSO.</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<a href="https://wt.website.com" id="LPlnk119377">https://wt.website.com</a> is configured in the shibboleth2.xml (not working with Okta IDP) for Company B a completely separate IDP instance. </div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
The following is what I have listed for both sites in the Shibboleth2.xml</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<span>https://st.website.com/SSOLogin"><br>
</span>
<div> <Sessions lifetime="28800" timeout="3600" checkAddress="false" relayState="cookie" handlerSSL="false"><br>
</div>
<div> <SSO entityID="http://www.okta.com/UNIQUEIDforCorpA"><br>
</div>
<div> SAML2 SAML1<br>
</div>
<div> </SSO><br>
</div>
<div> </Sessions><br>
</div>
<div> <!-- If you can provide a URL to your metadata file, use the line below: --><br>
</div>
<div> <MetadataProvider type="XML" file="C:\opt\shibboleth-sp\etc\shibboleth\st.website.com-idpMetadata.xml" /><br>
</div>
<div> <AttributeExtractor type="XML" validate="true" path="attribute-map-stwebsite.xml"/><br>
</div>
<div> <CredentialResolver type="File" key="sp-signing-key.pem" certificate="sp-signing-cert.pem"/><br>
</div>
<div> </ApplicationOverride><br>
</div>
<div> <ApplicationOverride id="wt.website.com" entityID="https://wt.website.com/shibboleth" REMOTE_USER="eppn" homeURL="https://wt.website.com/SSOLogin"><br>
</div>
<div> <Sessions lifetime="28800" timeout="3600" checkAddress="false" relayState="cookie" handlerSSL="false"><br>
</div>
<div> <SSO entityID="http://www.okta.com/<span style="font-family: Calibri, Helvetica, sans-serif; background-color: rgb(255, 255, 255); display: inline !important">UNIQUEIDforCorpB</span>"><br>
</div>
<div> SAML2 SAML1<br>
</div>
<div> </SSO><br>
</div>
<div> </Sessions><br>
</div>
<div> <!-- If you can provide a URL to your metadata file, use the line below: --><br>
</div>
<div> <MetadataProvider type="XML" file="C:\opt\shibboleth-sp\etc\shibboleth\wt.website.com-idpMetadata.xml" /><br>
</div>
<div> <AttributeExtractor type="XML" validate="true" path="attribute-map-wtwebsite.xml"/><br>
</div>
<div> <CredentialResolver type="File" key="sp-signing-key.pem" certificate="sp-signing-cert.pem"/><br>
</div>
<div> </ApplicationOverride><br>
</div>
<span></ApplicationDefaults></span><br>
</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
When someone from Corp B goes to the wt.website.com/SSOLogin, they're redirected to Corp A's Okta instance and not to Corp B's Okta instance.</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
I'm stuck and would appreciate some help as we will be bringing on more companies in the near future. </div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Thank you!</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
-Julio</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
</body>
</html>