Question on PingFederate

[Cantor, Scott]

> Ping mentions that the same instance of PingFederate can run both as
> an IdP and SP - I am curious on what would be the use case? Won't this
> defeat the purpose of using SAML?

Ping's product is a gateway, like most commercial products. It's not designed to protect applications, but as a border component that hides all your applications from SAML partners and acts as an IdP in the other direction. They presumably use a proprietary SSO agent of some form when it comes to actual application integration.

-- Scott