Authorization layer in IDP

[Nate Klingenstein]

Fabien,

> I would like to know if there is a possibility to have an authorization layer in the Shibboleth IDP, in order to study the possibility of switching from Keycloak one to Shibboleth one ?

Yes, there is.  You would enable the "context-check" Interceptor.flow.  It's fully documented herein:

https://shibboleth.atlassian.net/wiki/spaces/IDP4/pages/1265631716/ContextCheckInterceptConfiguration

Take care,
Nate.

--------
Signet, Inc.
The Art of Access ®

https://www.signet.id