Shibboleth & IIS

[Cantor, Scott]

On 2/26/19, 9:00 AM, "users on behalf of Boyd, Todd M." <users-bounces at shibboleth.net on behalf of tmboyd1 at ccis.edu> wrote:

> I wrote a simple HTTP module that converts Shibboleth SAML attributes back to Prinicipals for the logged-in user and
> their group memberships so that we can still apply authorization filters, but even then we have to leave Anonymous
> enabled as our authentication method.

The SP does that natively now (but in any event, you certainly can't turn on a second authentication requirement and not satisfy it, of course).

-- Scott