[shib_auth] drupal sites under path

[Kristof Bajnok]

On 09/26/2012 12:56 PM, Pedro Albuquerque wrote:
> I managed to make drupal login work with shibboleth. These sites are
> like www.site1.com, www.site2.com.
> However, I need drupal sites like www.domain.com/site1 or
> www.domain.com/path/site2 to work with shibboleth login as well.

It should be no problem for shib_auth. You need to configure the module
separately for both installations, per se.

If you don't want that a user accessing drupalA also access drupalB
without logging in (or being redirected to the IdP), you need to add a
separate Shibboleth 'application' (applicationOverride), which usually
also needs a new Service Provider entity in the metadata. After that,
you should make sure that you set the request mapping correctly (either
in the RequestMap in shibboleth2.xml or in Apache directives.
This is not an easy process, but it's only Shibboleth SP (and metadata)
configuration.

If you don't want to separate the installations on the SP level, the
process is fairly straightforward: you just tell the Drupal installers
to use the proper paths and databases.

Kristof