SAML IdP Proxy

[Cantor, Scott]

On 3/11/13 10:13 AM, "Mark Scheible" <mscheible at mailbox.mcnc.org> wrote:

>"...but there are usually better alternatives that are explicitly
>designed to be a gateway."
>
>Can you elaborate on the above statement?

Tom already did, simpleSAML is probably best of breed at being a SAML
gateway. I don't think it's as good an IdP or SP individually (or I
wouldn't be working on Shibboleth) but for operating both in one layer,
it's certainly more geared to this use case.

-- Scott