ADFS 2 as Shib Proxy

Peter Schober peter.schober at univie.ac.at
Thu Aug 31 16:06:33 EDT 2017


* David Langenberg <davel at uchicago.edu> [2017-08-31 21:58]:
> Yeah, let’s just say that’s not a supportable option (putting local
> school addresses into the central LDAP server).

That may be the case but that's not what I suggested. I was talking
about using thse local schools' data sources within your campus IDP.

I.e., looking up additional LDAP servers if need.
Or (more along the lines of what you commented on) maybe
(one-way-)syncing them into another data source (possibly an RDBMS)
solely for the IDP to use.

Either of those methods would avoid putting local schools' data in to
the central enterprise LDAP servers but still made the data available
to the IDP.
-peter


More information about the users mailing list