onelogin ruby-saml

[Peter Schober]

* Karla Borecky <kborecky at smith.edu> [2017-02-03 22:03]:
> Has anyone else dealt with a vendor using this SAML SSO implementation?

Not really with a vendor, but the omniauth saml strategy is based on
(or wrapping) that code, as used in e.g. Gitlab CE (self-hosted
install).
As Scott said, I was able to use that with a single IDP and a bit of
mucking about at both sides until the application was happy.
While ruby-saml itself seems to have some support for SAML Metadata
(no mention of validating a signature on that metadata, though) that
also seems to be limited to a single IDP.

None of that means anything for an arbitrary application calling into
the Ruby API, of course, other than "It can be made to work, for
simple cases".
-peter