Auth0 SAML service provider integration with shibboleth service provider

Kannan, Satheesh (ELS-CON) s.kannan.1 at elsevier.com
Thu Mar 21 12:55:46 UTC 2024


Hi team,

Good morning!!

Is there a possibility of communication between two SAML service providers? I would like to discover how to go from step 1 to step 3 in the below customer journey.
How to forward the saml assertion from shibboleth service provider to auth0 service provider?

For example, please look at the customer journey.

1.User from X domain Access Request at service provider 1(AuthO)
A user attempts to access resources or services provider by SP1(Auth0)
2. Initiation of SAML authentication from SP1 to SP2(shibboleth service provider2)
SP1, acting the initiating Service Provider(SP), redirects the user to SP2 (shibboleth service provider) through SP initiated SSO.
3. Routing Decision at SP2(Shibboleth)
SP2, upon receiving the authentication request makes a decision of which Identity Provider (IdP) to route the authentication to. This decision can be based on factors user input and so on.
4. Redirection to Selected IdP
SP2 redirects the user to selected  IdP for authentication
5.Authentication at Selected IdP.
the user authenticates at the selected IDP
6.SAML Assertion Response to SP2.
Upon successful authentication, the selected IdP sends a SAML assertion back to SP2.
7. Processing SAML Assertion at SP2
SP2 process the SAML assertion and performs any required transformations
8.Forwarding User to SP1
SP2, forward the user,along with the Validated SAML assertion back to SP1
9. User Access granted at SP1
SP1, upon receiving the validated SAML assertion from Sp2, grants access to the requested resources or services

Regards,
Satheesh

________________________________

Elsevier B.V. Registered Office: Radarweg 29, 1043 NX Amsterdam, The Netherlands, Registration No. 33158992, Registered in The Netherlands.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20240321/ebaf14f7/attachment.htm>


More information about the users mailing list