What entityId to choose to configure Service Provider (SP) in shibboleth?

ぃ、小莉子 提交于 2019-12-01 06:49:47

You should use the URI for the service provider, not necessarily the name of the physical host . So, if your site is "exp.uni.edu", but hosted on the webserver panther-web-07.uni.edu, you'd be safe using something like "https://exp.uni.edu/shibboleth-sp" for your SP entityID. If this SP is running on the webserver for the engineering school at UNI, you could also use something like "https://engineering.uni.edu/shibboleth-sp". It is not required that the entityID resolve, but it should use a namespace your organization owns/controls, and may resolve someday.

Your entityID doesn't necessarily need to be the same as your application's DNS name, since a single Service Provider can protect multiple applications with distinct DNS names running on the same webserver.

You wouldn't want to use the panther-web-07.uni.edu webserver hostname for your entityID, because while the name of the server on which the "exp.uni.edu" site is hosted, the URI for the "exp.uni.edu" hopefully will be static throughout the lifetime of the service.

易学教程内所有资源均来自网络或用户发布的内容,如有违反法律规定的内容欢迎反馈
该文章没有解决你所遇到的问题?点击提问,说说你的问题,让更多的人一起探讨吧!