Google ID as sort of the IDP?

[Yannick Béot]

Hi,
Google cannot work as a SAML IdP per se, even though it supports SAML 2.0
as a service provider (from your IdP to Google Apps).

If you want to delegate the authentication to you Idp to Google Apps, you
would have to implement OAUTH (
https://developers.google.com/accounts/docs/AuthForWebApps) as an
authentication provider for IdP. It's possible technically speaking I think.

Y.



On Tue, Oct 9, 2012 at 10:55 PM, Oleg Chaikovsky <
oleg.chaikovsky at aegisusa.net> wrote:

> I have seen the large amounts of information about connecting Google
> Apps via Shib which is fairly straightforward at this point. Google Apps
> as an SP.
>
> So - now - if a group wanted to make their Google Apps domain to be the
> primary identifier for all of their other apps - would that simply be
> using external auth through the IdP? Simple as that? I keep thinking
> there must be more to it but all info I have read on the Wiki points to
> that model. (there are no additional attributes to consider in this idea).
>
> --
> Oleg Chaikovsky
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20121010/e43cdf49/attachment-0001.html