...
Find <RequestMap>...<Host name="shibtest.cit.cornell.edu">. Change the name to the site name you defined in step above. In our example files, we defined two hosts and specifies different authorization rules for each site and location. Please modify it to meet your site requirement. Additional resources for AccessControl: https://wiki.shibboleth.net/confluence/display/SP3/XMLAccessControl
| Info |
|---|
| Keep in mind Shibboleth IDP doesn't support nested groups( for example group B is a member of group A, user C is a member of group B, IDP doesn't know user C is a member of group A) . If you have to use nested group, you need to convert nested group to dynamic group. |
| Info |
|---|
| If your site supports both http and https, |
...
| add redirectToSSL="443" in Host element because shibboleth SP doesn't work with http connection. |
4.4 Update SP entityID:
Find <ApplicationDefaults entityID="shibtestsites.cit.cornell.edu" ...> Change the entityID to whatever you like. EntityID is the name of your SP. Each SP should have unique name. It's better not include space or special characters in it( / or : are fine).
...