Google ID as sort of the IDP?

[Cantor, Scott]

On 10/10/12 10:05 AM, "Yannick Béot" <yannick.beot at gmail.com> wrote:
>
>If you want to delegate the authentication to you Idp to Google Apps, you
>would have to implement OAUTH
>(https://developers.google.com/accounts/docs/AuthForWebApps) as an
>authentication provider for IdP. It's possible technically speaking I
>think.

Right, but you can also do this non-natively (meaning not with an actual
OAuth implementation within the IdP) by sticking an OAuth RP into the mix
and tying that to the IdP via either the REMOTE_USER or ExternalAuth
handlers, which I think was the OP's (accurate) impression.

However, it is perhaps open to question whether you are permitted by their
terms 
of service to then offer downstream authentication to SPs that aren't part
of your organization.

-- Scott