Can a Shibboleth service provider present itself as a SAML identity provider for federation?

[Peter Schober]

* Graham Leggett <minfrin at sharp.fm> [2019-04-24 17:00]:
> So AJP is the preferred method to pass information from Shibboleth
> to Java?

Yes, that provides the highest fidelity (no translation of decoded
information -- attribute values -- to HTTP Request Headers) and
security.
If the Java servlet container of your choice doesn't support AJP (I
think Jetty doesn't anymore?) yuo can still make it work with HTTP
Request Headers, but it's not "preferred".

-peter