Shibboleth + Cisco AMP ?

[Peter Schober]

* Robert Rust <robert.j.rust at uwrf.edu> [2019-03-13 19:01]:
> Has anybody on the list set up Cisco AMP with Shibboleth
> authentication? Cisco has docs for Okta, Ping Federate and ADFS SSO,
> but Shibboleth isn’t “formally” supported. I’d like to think it’s
> possible and am looking for additional insight before attempting it.

Seems they publish SAML 2.0 Metadata at:
https://auth.amp.cisco.com/auth/metadata/service_provider
that suggests the SP needs an emailAddress-type NameID and no
attributes.

So if your IDP loaded a local[1] copy of the above metadata and was
prepared to assert emailAddress NameIDs you should be good to go?

Of course all of that may be wrong (but then the metadata is wrong, too).
-peter 

[1] The metadata above is signed but has no validUntil date.