Help needed to guide of using SAML SP as backend side of our product.

[Saha, Rajib]

Dear Experts,

Our product is a legacy product with server/client architecture.

We are using jsp and Fiori based technology in frontend side.
In backend, we are using mostly C++ and some extend Java stack.

For SAML based login, we were using spring SAML.

But, our security team seeing a very corner scenario threat with the current design.
Our experts are brainstorming, if we can bring the SAML SP uses in the backend side[instead of frontend].
We are just thinking, if we can use C++ based SAML SP for the requirement.

As we are just in the beginning phase of the investigation, can you experts please suggest, to bring SP support in backend side:

  *   Hope we are in the right direction of the thought process?
  *   Can we use shibboleth C++ based SP?
  *   Do we have commercial license support for shibboleth C++ SP?
  *   Where can we get the detailed documentation for the usage of C++ based SP, API level documentation for consumers like us?
  *   What will be exact timeline for C++ based SP support based on Open SAML 2.0? As we learnt that open SAML 3.0 and above doesn't support C++.
  *   Is there any better alternative, to adopt for the solution, instead of C++ based SP?

Please let me know, if you need any more details from my side.

Regards
Rajib


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20240524/8e108377/attachment.htm>