PeopleSoft/WebLogic proxy with Shibboleth Native SP and Apache

[Scott Koranda]

Hello,

I understand from the list archives that a number of campuses have
"domesticated" or integrated PeopleSoft/WebLogic into a
SAML2/Shibboleth infrastructure by "proxying" with the Shibboleth
Native SP and Apache. The approach I have read the most about involves
using the "custom sign-on API" provided by PeopleSoft/WebLogic (which
may or may not be the same as leveraging "Signon PeopleCode"?).

I do not have any PeopleSoft/WebLogic experience but would like to
understand if the approach using the Shibboleth Native SP and Apache
as a "proxy" requires proxying the entire PeopleSoft/WebLogic
application (so that no HTTP GET or POST ever go directly to
PeopleSoft/WebLogic) or if the "proxy" is only active during the
session initiation phase of a SSO flow.

I am grateful for any input people have.

Thanks,

Scott K