Novell/NetIQ IDM and Shibboleth

[Tom Scavo]

On Fri, Feb 12, 2016 at 1:38 PM, Schwoerer, Brad <schwoerb at uww.edu> wrote:
> I was curious how many institutions use NetIQ IDM products and also have
> Shibboleth as their IDP.  The reason I am asking is, we use some of their
> products and one of their products (OSP) that make use of SAML2 does not
> work with a Shibboleth IDP, and I am looking for others that can help
> persuade them to support more than NetIQ Access Manager as a SAML2 IdP.

I'm not sure I understand what you're asking but either way, here are
some facts:

1) More than 90% of the IdP deployments in the InCommon Federation are
Shibboleth.

2) At least 80% of the IdP deployments in all of higher ed worldwide
are Shibboleth. (The difference is simpleSAMLphp, which is used
primarily, but not exclusively, by the so-called hub-and-spoke
federations.)

3) It is estimated that there are 2000 Shibboleth IdP deployments
worldwide (which is more than all the others put together).

4) AFAIK the only implementations capable of supporting multilateral
federation out-of-the-box are Shibboleth and simpleSAMLphp. That is,
these are the only implementations that consume SAML metadata
according to the OASIS SAML Metadata Interoperability Profile.

Hope this helps,

Tom