Shibboleth SP comparison with Azure AD Application Proxy

[Peter Schober]

* Kate Dawson <k4t at 3msg.es> [2016-09-05 11:17]:
> I'm trying to determine if Azure AD Application Proxy 
> 
> https://azure.microsoft.com/en-gb/documentation/articles/active-directory-application-proxy-get-started/

No idea what that is or does but

> or an using something like 
> 
> https://wiki.shibboleth.net/confluence/display/SHIB2/SPReverseProxy

is not what you'd nornally need. Instead you'd deploy the Shibboleth
SP with the application and protect it end-to-end using the standard
SAML protocol (Web Browser SSO), no proxies involved.

The wiki page above is for unusual deployments where the webserver
running the Shibboleth SP software (and protecting the resource) needs
to be deployed "behind" another web server / reverse proxy, for
whatever (often "legacy") reasons. SAML protection is still end-to-end
here, and the protcol used is still a standard (OASIS) one.

> are similar solutions to the problem of 
> 
> 1. Authenticating users securely
> 2. Providing access to resources 

The Shibboleth SP can easily handle that, no proxies required.
-peter