Integration: Shibboleth as IdP and simpleSAMLphp as SP

[Peter Schober]

* Sam Wilson <swilsonau at gmail.com> [2014-01-24 01:37]:
> I have a working implementation of SSP working with a Shibboleth IDP.

Many have.

> The main config changes are metadata.sign.* configuration in
> config.php and making use of the $SSP/admin/metadata-converter.php
> to change your IDP metadata to SSP format.

This is not the SimpleSAMLphp list but I'd question the need for both
(i.e., I never had to do either one). Depends on how you establish
trust between entities, of course.

> Finally you will need to configure the
> $SSP/attributemap/$yourrelevantconf and specify it in your IDP
> metadata for SSP in saml20-idp-remote.php

Putting anything (here: software configuration) inside SSP's
(converted) metadata means it will be lost if you ever refresh that
metadata. config.php is a better place for referencing attribute maps
IMP (such as oid2name).
-peter