Using Shibboleth as Service Provider on IBM iSeries

[Cantor, Scott]

> 	1.  A user attempts to visit a protected website
> 	2.  The web server on our iSeries proxies over to, say a Windows PC
> with shibboleth, as the SP

Proxies sit in front. Nobody can access your system directly at all, only the proxy. That is the only possible way to do authentication on the web without deploying software for authentication on the server with the resource. I really have no comment on anything else, I'm only trying to communicate that simple fact. That's what the wiki page is trying to get across.
 
You either put software onto the iSeries box or you proxy. Full stop. Be it SAML, CAS, OIDC, basic-auth, I don't care what it is. The questions are whether to proxy or if not, what software you put on the iSeries. That's really it.

-- Scott