IdP gateway

[Peter Schober]

* Stefano Zanmarchi <zanmarchi at gmail.com> [2016-04-18 16:23]:
> I'm looking for an IdP gateway with the ability to add attributes to those
> received from an  IdP.
> The scenario I'd like to achieve is:
> - the user clicks on the SP's login button
> - she gets redirected to the IdP gateway
> - the IdP gateway presents the user with a list of IdPs she can chose from
> - the user selects an IdP and authenticates
> - upon succesful authentication the gateway returns the user to the SP
> adding some attributes (e.g. an entitlement).

If the source for "additional" attributes like entitlements is the
same for everyone, no matter what IDP they used for authentication,
then that's not a use-case for a proxy, but for an Attribute Authority.
The Shib SP has built-in support to query additional (statically
pre-configured) AAs for attributes about a subject.

Using the contributed Attribute Query Handler
https://bitbucket.org/PEOFIAMP/shibsp-plugin-attributequery-handler/
you can also easily (and fast) get the data from the SP.

-peter