SP cannot handle multiple IdP

[Michael A Grady]

> On Oct 11, 2016, at 4:00 PM, Tom Scavo <trscavo at gmail.com> wrote:
> 
> On Tue, Oct 11, 2016 at 4:47 PM, Qian, Yi <yqian at ku.edu> wrote:
>> 
>> University of Kansas recently signed touchnet for student services,
>> management just found out, they can only support single IdP.
> 
> Deploy an IdP Proxy between the SP and multiple IdPs. SimpleSAMLphp
> functions well as an IdP Proxy.
> 
> I attended a webinar today that discussed this technique. You can find
> the webinar materials online:
> http://www.incommon.org/affiliates/webinar.html

I'll add a +1 to this, SimpleSAML works well for this use case. To avoid putting too much about SimpleSAML on the Shib Users list, there is a Google Groups site:

 https://groups.google.com/forum/#!forum/simplesamlphp

Last thing about it: My preference is to start with its MultiAuth module as a base, because it gives you the flexibility of adding authentication sources that use protocols other than SAML, if needed at some point, in addition to SAML ones.

--
Michael A. Grady
IAM Architect, Unicon, Inc.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 842 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://shibboleth.net/pipermail/users/attachments/20161011/fa469c80/attachment.sig>