Shibboleth idp with Azure AD

[Ciro Larrazabal]

Hi 

I have the following problem. We have a functional shib. Idp, but some of the institutions wants to part to azure ad. The restriction is that they don’t want to be a sp to our shib idp.

This could be solved making the shibd idp a proxy the Problem is that, we don’t share a unique identifier, some users for the azure had more than one account with us. 

There is a way to ask in the way back (after being auth by azure) to choose between the possible identities?

If somebody knows something or have an idea in how to do it, I will be more than happy to know … also directions are welcomed. 

_________________________________________________  

Ciro Larrazabal, Senior Software Engineer  

gyselroth™
Albisriederstrasse 226  
8047 Zürich  
Switzerland  

+41 44 404 22 44  

larrazabal at gyselroth.com  
https://www.gyselroth.com  

_________________________________________________ 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20220302/18029b79/attachment.htm>