Shibboleth as SAML Proxy

[Nate Klingenstein]

> I guess you'd find the SAML SP now built into the Shib IDP to be
> insufficient for multi-party federating resources, but I haven't
> looked at that myself.
>

There are various ways to build discovery into the IdP.  We've done this
for several services, such as AWS Cognito, including automatically
scripting different SP's to route directly to specific IdP's.

It isn't too painful, though you lose some options and complicate the
deployment by necessity when proxying.  It should meet Clemens' use case,
but...

(Also, the Shib IDP is not the most lightweight software in the world
> if all you need is some SAML proxying, IMHO.)
>

I agree with the simpleSAMLphp suggestion.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20210705/2eda696b/attachment.htm>