IdP support for Open Auth?

[Klingenstein, Nate]

> A vendor's response to inquiry about SSO via SAML 2 is:
> "____ can integrate SAML through Open auth 2.0 if the service supports it."
> 
> Is that an arty "no" or does that offer the possibility of relying on Shibb IdP for authN?

I think they meant OAuth 2.0, which is a sign.

Anyway, there's a binding for SAML tokens to OAuth 2.0 that went through the IETF.  The IdP itself can't field OAuth requests as far as I know.

It would be pretty trivial to write a shim that could cache assertions sent by the IdP and expose those via OAuth.