IDP and effort?

[Peter Schober]

* andrea crotti <andrea.crotti.0 at gmail.com> [2013-04-08 13:38]:
> I thought that I could only use pysaml2 as service provider, but it looks
> like I can also do an Identity provider with that.
> 
> We have to allow other people to connect to our product using their own
> internal authentication, so maybe it's right I need to implement a service
> provider, still a bit confused about this..

I expected as much. Check "Native Service Provider (SP)" (middle
column) if the SP is available on the platform(s) you need:
https://wiki.shibboleth.net/confluence/display/SHIB2/Installation
Shibboleth works on the level of the webserver (no API-level
integration, which is considered a feature here) and mostly supports
Apache httpd, MS-IIS, and lighttpd via FastCGI (but not Nginx).

If that suits your environment have a look at how the integration
would be done:
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPEnableApplication
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPAttributeAccess

There are plenty of Django "middleware"s available for integrating
with the Shibboleth SP (or webserver authentication in general),
search the web for "django shibboleth".
-peter