AW: Shibboleth as SAML Proxy

[Bergmann, Clemens]

Thanks for the answers.

I am currently also in the process of merging one Shibboleth and one CAS Server to one shibboleth server.
Now I am a little uncertain if I should continue setting up shibboleth or if I should investigate replacing our IdPs with a simpleSAMLphp instance which could do both things.

On the other hand these are two different requirements:
1. IdP for the users of a university
2. SAML-Proxy to support single-idp-software for a group of universities

It might be that Shibboleth is better for 1 and simpleSAMLphp is better for 2. But I don't have much experience with any of them.
What is your opinion on this?

Mit freundlichen Grüßen
Clemens Bergmann
-- 
Clemens Bergmann
Gruppe Nutzermanagement und Entwicklung
Technische Universität Darmstadt
Hochschulrechenzentrum, Alexanderstraße 2, 64289 Darmstadt
Tel. +49 6151 16 71184
http://www.hrz.tu-darmstadt.de/


> -----Ursprüngliche Nachricht-----
> Von: users <users-bounces at shibboleth.net> Im Auftrag von Nate
> Klingenstein
> Gesendet: Montag, 5. Juli 2021 17:46
> An: Shib Users <users at shibboleth.net>
> Betreff: Re: Shibboleth as SAML Proxy
> 
> 
> 	I guess you'd find the SAML SP now built into the Shib IDP to be
> 	insufficient for multi-party federating resources, but I haven't
> 	looked at that myself.
> 
> 
> 
> There are various ways to build discovery into the IdP.  We've done this for
> several services, such as AWS Cognito, including automatically scripting
> different SP's to route directly to specific IdP's.
> 
> 
> It isn't too painful, though you lose some options and complicate the
> deployment by necessity when proxying.  It should meet Clemens' use case,
> but...
> 
> 
> 	(Also, the Shib IDP is not the most lightweight software in the world
> 	if all you need is some SAML proxying, IMHO.)
> 
> 
> 
> I agree with the simpleSAMLphp suggestion.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 6377 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/users/attachments/20210706/4c1a6b80/attachment.p7s>