Luc, That's basically the most common way Shibboleth is used, but I strongly recommend you take awhile to familiarize yourself with identity, SSO, and authn/z before you proceed with any implementation. These are serious functions for any application and key locations for security vulnerabilities if you build it out wrong. Take care, Nate.