title: SSO SAML SP - How many websites to cover under one SP?
body: <p>I'm attempting to implement a saml service provider, but i'm not sure what level of system to cover with a single SP.</p>
  
  <p>What level of architecture per SP is considered good practice? Should we have one for our entire department, per server, per domain, per application pool or even for every site?</p>
  
  <p>Our organisation has a shibboleth IDP and i'm using kentor authservices. Its working for one site but the sp is part of that site. 
  Assuming best practice is not one per-site if anyone has a hint on how best to approach making it more generic (i.e. one entityid for multiple sites) that would be appreciated.</p>