Development Environment

Three SP's, a hub (a combined IdP and SP) and three IdP's get spun up by docker-compose. In order for this to work, you will need to edit your hosts file to include entries for the following domains ...

• ssp-sp1.local # to be used with port 8081
• ssp-sp2.local # to be used with port 8082
• ssp-sp3.local # to be used with port 8083
• ssp-hub.local
• ssp-idp1.local # to be used with port 8085
• ssp-idp2.local # to be used with port 8086
• ssp-idp3.local # to be used with port 8087

The ./development folder holds various files needed by these six containers. It's the ssp-hub.local container which is the focus and serves as the simplesamlphp hub.

Who should see what?

• ssp-sp1.local should be able to see and authenticate through both ssp-idp1.local and ssp-idp2.local
• ssp-sp2.local should only be able to see and authenticate through ssp-idp2.local
• ssp-sp3.local should only be able to see and authenticate through ssp-idp1.local

If a session authenticated through one of the IdP's that is not permitted for a certain SP, then the hub should force that SP to re-authenticate against the right IdP.