ECP on an idp configured for Azure Proxy (+MFA)

[Cantor, Scott]

On 3/25/22, 4:28 PM, "users on behalf of Jeffrey Williams via users" <users-bounces at shibboleth.net on behalf of users at shibboleth.net> wrote:

>   I was curious to know if anyone has handled ECP-type authn to an IDP that is proxying authn to Azure?

That's not something you would be able to do without extraordinary effort. The original Liberty ECP profile stood for Enhanced Client or Proxy profile. The proxy in that name comes from the idea that it was expected that some mobile clients wouldn't support SAML directly but would talk to a proxy that screen scraped an IdP.

We didn't (and definitely will not) implement the proxy use case, we implemented the enhanced client use case.

-- Scott