Using Shibboleth Identity Provider for Users Authenticated on an External Shibboleth System

[Christopher Bongaarts]

I think a more typical approach would be to set up your own IdP to 
handle the non-Shibboleth authentication sources, but have your SP use 
the third-party IdPs directly via a discovery mechanism of some sort.

On 9/17/2012 6:39 PM, Dave Eisen wrote:
> Greetings.
>
> I am looking to develop a centralized service to provide authentication
> services to all of my company’s hosted platforms. The bulk of the users
> will need to be authenticated against third party systems local to their
> organization. Some of the organizations use LDAP, some use Shibboleth,
> some use other protocols. We do not at this time need to maintain our
> own internal login/password files.
>
> We will also need data acquisition services getting additional
> information about these users such as email address, street address,
> user type, etc.
>
> The natural way to implement this would be for my company to host our
> own Shibboleth Identity Provider which does whatever parsing and
> configuration management needed to support this feature and then sends
> the request for the “real” authentication to the third party that knows
> the user. It is natural, but I do not know if it is technically possible.
>
> It is clear from the Shibboleth documentation that I can forward an
> authentication request to an LDAP system. I’m wondering how I support
> users managed by a third party Shibboleth system.
>
> Is it possible to configure my Identity Provider to authenticate user
> foo using Shibboleth at bar.com’s Identify Provider? Different Identity
> Providers for different users? How do I do this?
>
> Thanks.
>
> Dave Eisen
>
> Sequoia Retail Systems
>
> dkeisen at sequoiars.com
>
>
>
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
>


-- 
%%  Christopher A. Bongaarts   %%  cab at umn.edu          %%
%%  OIT - Identity Management  %%  http://umn.edu/~cab  %%
%%  University of Minnesota    %%  +1 (612) 625-1809    %%