proxy between SP and IDP with HTTP-POST binding

Peter Schober peter.schober at univie.ac.at
Fri May 4 07:19:56 EDT 2018


* Dole, David <ddole at dxc.com> [2018-05-03 23:32]:
> My problem is that my user agent (client browser) reaches everything
> through a reverse proxy, i.e. the IDP, the SP and the final target
> URLs must all be reached using the proxy host.

Standing up a reverse proxy that proxies to (and therefore
impersonates, as far as URLs go) any and all resources doesn't seem
very practical to me -- the above sounds like you'd want a forward
proxy instead (think SOCKS or HTTP CONNECT or PAC)?

I.e., you're proxying clients here, not servers, AFAICT.

-peter


More information about the users mailing list