Implementing Salesforce SSO with Shibboleth

[Peter Schober]

* Lior Chaga <Lior.Chaga at modelity.com> [2013-03-11 14:25]:
> Basically I'd like to protect my REST API, That is correct. And I'd
> like Salesforce to be my identity provider.

It seems Salesforce can indeed by used as SAML IdP:
http://login.salesforce.com/help/doc/en/identity_provider_about.htm
but unless they support the ECP profile (no idea, ask Salesforce, I
suppose) that won't buy you much for API authentication.

> So if I understand what you're saying, Shibboleth is not what I'm
> looking for? Do you suppose you could give me a lead to where I
> should start my research?

Shibboleth certainly wasn't designed for API protection but it's not
the problem or limiting factor here. If you're tied to Salesforce as
an IdP that's were you'd need to look. Recommending things they might
not support seems pointless.
-peter