<div dir="ltr"><p class="MsoNormal" style="margin:0in;font-size:11pt;font-family:Calibri,sans-serif">Hello,</p>

<p class="MsoNormal" style="margin:0in;font-size:11pt;font-family:Calibri,sans-serif"> </p>

<p class="MsoNormal" style="margin:0in;font-size:11pt;font-family:Calibri,sans-serif">I have what I hope is an easy question. I have multiple
subdomains that I want to protect with a single SP instance. One
domain/application is currently working with IdP initiated SSO. My problem is I
cannot access the server variables <span style="font-size:12pt">in the second
secured application (and it appears to the application no session has been
created, but I can see it has been in the logs). </span></p>

<p class="MsoNormal" style="margin:0in;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:12pt"> </span></p>

<p class="MsoNormal" style="margin:0in;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:12pt">My domains look like </span></p>

<p class="MsoNormal" style="margin:0in;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:12pt"><a href="https://site1.example.net" style="color:rgb(5,99,193)">https://site1.example.net</a></span></p>

<p class="MsoNormal" style="margin:0in;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:12pt"><a href="https://site2.example.net" style="color:rgb(5,99,193)">https://site2.example.net</a></span></p>

<p class="MsoNormal" style="margin:0in;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:12pt"> </span></p>

<p class="MsoNormal" style="margin:0in;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:12pt">and my SP entity ID is <a href="https://site1.example.net/" style="color:rgb(5,99,193)">https://site1.example.net/</a></span></p>

<p class="MsoNormal" style="margin:0in;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:12pt"> </span></p>

<p class="MsoNormal" style="margin:0in;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:12pt">Currently they’re using <span style="color:white;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial"><a href="https://secureapplication.mhvfcu.net/&TARGET=https:/chatv2.mhvfcu.net&ACSIdx=1" style="color:rgb(5,99,193)">https://site1.example.net/&TARGET=https://site1.example.net/auth/ExternalLogin&ACSIdx=1</a></span><span style="color:black;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial"> in their IdP and SSO is working fine in
the first application. I was under the impression they could use </span><span style="color:white;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial"><a href="https://secureapplication.mhvfcu.net/&TARGET=https:/chatv2.mhvfcu.net&ACSIdx=1" style="color:rgb(5,99,193)">https://site1.example.net/&TARGET=<span style="color:black;text-decoration-line:none">https://site2.example.net</span>&ACSIdx=1</a> </span><span style="color:black;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">for the second application. Everything
works, except the application doesn’t believe it’s authenticated. </span><span style="background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial"></span></span></p>

<p class="MsoNormal" style="margin:0in;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:12pt;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial"> </span></p>

<p class="MsoNormal" style="margin:0in;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:12pt;color:black;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">How
is the application supposed to be specified in this URL? What format should I
be providing to the IdP?</span><span style="font-size:12pt"></span></p><p class="MsoNormal" style="margin:0in;font-size:11pt;font-family:Calibri,sans-serif"><br></p></div>