Shibboleth IDP trust with other IDP

[Cantor, Scott]

On 3/8/14, 3:56 PM, "krrishv" <krish.v at gmail.com> wrote:

>6) Now tried to accessing the server1 URL SP like this
>https://server1/idp/Authn/RemoteUser and it goes to idp1 for auth and
>takes
>me to shipidp/idp/Authn/RemoteUser as per proxy and i get the below page.

Because that is not how to use an IdP.

The "protected resource" of the IdP is its single sign on service, which
in turn needs to be invoked by a SAML SP issuing a SAML request to that
endpoint.

The starting point is not an IdP, it's the ultimate SP.

-- Scott