shibboleth IDP

[Cantor, Scott]

> One of our client want to consume IDP Services who are not service provider
> and don't have any metadata.

Metadata is a representation of something. The something exists whether metadata exists in advance to represent it.

Anything consuming the IdP for SSO is a service provider by definition, that's what an SP is.

So on both counts you're just arguing semantics here. They are an SP and you will need to define metadata yourself if they won't do it for you.

> As I understand in Service provider case its server to server communication.

You understand incorrectly. Communication paths depend on choice of binding.

> Is their a way we can still use IDP to authenticate user for application who are
> not service providers.

No.

-- Scott