Implementing Salesforce SSO with Shibboleth

[Peter Schober]

* Peter Schober <peter.schober at univie.ac.at> [2013-03-11 13:24]:
> * Lior Chaga <Lior.Chaga at modelity.com> [2013-03-11 13:11]:
> > We have a web site with java server-side, and we'd like to implement
> > SSO with Salesforce. We are using spring framework.
> 
> Where does Shibboleth fit here in and which component are you
> interested in? http://shibboleth.net/products/

* Lior Chaga <Lior.Chaga at modelity.com> [2013-03-11 13:28]:
> I'm guessing I should use Identity Provider, shouldn't I?

Well, "We have a web site" sounds like your a Service Provider (in
SAML terms). So is Salesforce (AFAIK). SPs don't "talk" to SPs and
there is no SSO involved either. Hence my probably stupid question.

You could install the IdP as a standalone application/service and
connect both your SP and Salesforce to it. Not sure you want this.

Or you could build your own IdP based on OpenSAML Java, which seems to
be what you were asking. Most would advise against this because unless
you know you're dealing with a very limited and static list of
imlpementations and SAML profiles.
Questions regarding building your own SAML IdP should go to the
developer mailing list (which is also the OpenSAML mailing list),
-peter