Anyone working on a Proxy IDP extension for V3?

[Keith Wessel]

On Thu, Feb 25, 2016 at 12:56:22AM +0000, Cantor, Scott wrote:
> That seems like overkill. If you have something that works with a discovery-based approach, there are a myriad of discovery software options you could use, most of which are deemed much easier to use than the CDS.

Yes, it would seem so with the information I gave you. But we were already planning to put a Proxy IDP in place, anyway, to support the growing number of services we need to support for multiple campuses that can NOT support the discovery protocol. When the retirement announcement of the DS came out, we decided the proxy IDP could handle that, as well.

> People have them, but there is no solution other than some custom code and gluing an SP on to the front of the IdP.

I had considered that route. Seems like the trickiest part would be the data connector that would pull the attributes back in, and I was hoping someone might be working toward contributing such an extension.

> There are no plans for a Java SP given the scope of that work, the resources available, and the perceived interest in that work vs. other major projects that would compete with it (e.g. OAuth).

No, I didn't expect that and, as I realized in an off-list conversation after I posted this note, I worded my question to make it sound as if that was my goal. That seems like a ridiculously complicated project to propose.

And now I'm beginning to see why Simple SAML PHP is such an attractive option. :)

Thanks, Scott.
Keith