Shibboleth IdP SAML with CyberArk SP

[Cantor, Scott]

> Does anyone have any experience configuring Shibboleth IdP v 3.3.2 with
> CyberArk Password Vault Web Access version 10.5.0.48 as the SP for SAML
> SSO? In summary, on SP-initiated SSO, CyberArk is sending the authentication
> request with an HTTP GET and IdP is expecting an HTTP POST.

The IdP doesn't require either one, you pick the binding you want to use and tell the SP which endpoint to use based on that (if it doesn't support metadata). If that SP isn't conformant with any binding, then it won't work.

-- Scott