Getting Signed SAML assertion in application

[Tom Scavo]

On Tue, Jan 28, 2014 at 2:19 AM, Stefan Rasmusson
<rasmusson.stefan at gmail.com> wrote:
> If Iam using a IDP proxy set up

Shibboleth can be used to build a SAML IdP Proxy (I know people that
have done it and published papers on the subject) but that is not one
of its strengths IMO. You may want to look at simpleSAMLphp, which is
more adept at proxying SAML assertions.

> is it possible for me to get the SAML
> assertion that originated from the real IDP or will I just get the IDP proxy
> Assertion?

This is not a Shibboleth question, and actually it's not even a SAML
question. The original SAML assertion *can* be wrapped inside the
assertion ultimately made by the IdP Proxy but there is no standard
way of doing that that will be readily understand by any SP. If you
control the SP, and you're willing to hack on the IdP Proxy
implementation, you might be able to get this to work.

Tom