You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
This repository was archived by the owner on Jun 25, 2024. It is now read-only.
Baggerone edited this page Dec 8, 2016
·
7 revisions
Three SP's, a hub (a combined IdP and SP) and two IdP's get spun up by docker-compose. In order for this to work, you will need to edit your hosts file to include entries for the following domains ...
ssp-hub-sp.local # to be used with port 8081
ssp-hub-sp2.local # to be used with port 8082
ssp-hub-sp3.local # to be used with port 8083
ssp-hub.local
ssp-hub-idp.local # to be used with port 8085
ssp-hub-idp2.local # to be used with port 8086
The ./development folder holds various files needed by these six containers. It's the ssp-hub.local container which is the focus and serves as the simplesamlphp hub.
Who should see what?
ssp-hub-sp.local should be able to see and authenticate through both ssp-hub-idp.local and ssp-hub-idp2.local
ssp-hub-sp2.local should only be able to see and authenticate through ssp-hub-idp2.local
ssp-hub-sp3.local should only be able to see and authenticate through ssp-hub-idp.local
If a session authenticated through one of the IdP's that is not permitted for a certain SP, then the hub should force that SP to re-authenticate against the right IdP.