Dealing with different sets of users

[Cantor, Scott]

On 6/6/12 9:47 AM, "Rob Whitener" <rob.whitener at audaxhealth.com> wrote:
>
>My company is in the process of setting up Shibboleth to integrate with a
>partner who uses SAML for auth.  The end goal is to have their users be
>able to use our services (they are the identity provider and we are the
>service provider).  However, we will
> still have another large set of users who authenticate directly to us
>and there is no need for SAML.  Is there any way in the configuration of
>shibboleth to account for this or will I need to make the application
>itself account for this?

It isn't directly supported (it couldn't be). There are a handful of
options:

- stick an IdP in front of those other users to consolidate everything
behind one abstraction (this is the best option, because it leads to the
right UI)

- do it in the application

- 2.5 adds a new capability for integration with external authentication,
it's in the wiki now, search for SPBackDoor

-- Scott