<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:dt="uuid:C2F41010-65B3-11d1-A29F-00AA00C14882" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p.MsoPlainText, li.MsoPlainText, div.MsoPlainText
{mso-style-priority:99;
mso-style-link:"Nur Text Zchn";
margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
span.E-MailFormatvorlage17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.NurTextZchn
{mso-style-name:"Nur Text Zchn";
mso-style-priority:99;
mso-style-link:"Nur Text";
font-family:"Calibri",sans-serif;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 2.0cm 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=DE link="#0563C1" vlink="#954F72"><div class=WordSection1><p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:11.0pt'>Hi,<o:p></o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:11.0pt'><o:p> </o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:11.0pt'>I am currently in the process of merging one CAS Server (CAS and SAML Protocols) and one Shibboleth Server (SAML only) to one shibboleth Server. <o:p></o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:11.0pt'>Both instances currently have different entityIDs. My current plan is to work with the Shibboleth entityID by default and override the responderId with the following statement for all SPs that previously used the CAS IdP:<o:p></o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:11.0pt'><o:p> </o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:11.0pt'><util:list id="shibboleth.RelyingPartyOverrides"><o:p></o:p></span></font></p><p class=MsoPlainText><font size=2 face=Calibri><span lang=EN-US style='font-size:11.0pt'><bean parent="RelyingPartyByName" c:relyingPartyIds="#{{...}}"<o:p></o:p></span></font></p><p class=MsoPlainText><font size=2 face=Calibri><span lang=EN-US style='font-size:11.0pt'>p:responderId="#{{'https://alternative-idp.example.com/idp/shibboleth'}}"><o:p></o:p></span></font></p><p class=MsoPlainText><font size=2 face=Calibri><span lang=EN-US style='font-size:11.0pt'></util:list><o:p></o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:11.0pt'><o:p> </o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:11.0pt'>After merging the two IdPs I would have to coordinate with each SP to change the IdP-EntityID on the SP side and remove the SP entity-ID from the exception list on my side.<o:p></o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:11.0pt'>A much cleaner option would be to set the responderId based on the apache vhost the request is coming from. That would allow the SPs to switch my entityID whenever they are ready.<o:p></o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:11.0pt'><o:p> </o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:11.0pt'>I could not find a way to configure this. Do you know of an option without running two completely separate IdPs on the IdP Server?<o:p></o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:11.0pt'><o:p> </o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt;mso-fareast-language:DE'>Mit freundlichen Grüßen<o:p></o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt;mso-fareast-language:DE'>Clemens Bergmann<o:p></o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt;mso-fareast-language:DE'>-- <o:p></o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt;mso-fareast-language:DE'>Clemens Bergmann<o:p></o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt;mso-fareast-language:DE'>Gruppe Nutzermanagement und Entwicklung<o:p></o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt;mso-fareast-language:DE'>Technische Universität Darmstadt<o:p></o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt;mso-fareast-language:DE'>Hochschulrechenzentrum, Alexanderstraße 2, 64289 Darmstadt<o:p></o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt;mso-fareast-language:DE'>Tel. +49 6151 16 71184<o:p></o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt;mso-fareast-language:DE'><a href="http://www.hrz.tu-darmstadt.de/"><font color=black><span style='color:windowtext'>http://www.hrz.tu-darmstadt.de/</span></font></a><o:p></o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'><o:p> </o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'><o:p> </o:p></span></font></p></div></body></html>