Auth0 acts as proxy service provider to shibboleth SP

Cantor, Scott cantor.2 at osu.edu
Tue Jan 21 14:40:46 UTC 2025


> Is this possible Auth0 can acts as proxy SAML Service
> Provider(SP), routing authentication requests to multiple
> Identity providers(IdPs) via a shibboleth SP and sending the
> resulting SAML assertions back to Auth0 application.

At a fundamental level, no, because the assertions issued to any form of proxy are unusable by and should never be given to whatever the back-end is, and our software is not going to keep supporting assertion access. If you just mean "consume assertion and pass data along to back-end", that's what our SP literally does.

> While routing the authentication requests, how to route the
> domain name to specific IdP entityIds?

Apache commands or the RequestMap, as documented.

> Is there a way to achieve this. could you explain
> configurations needed in shibboleth2.xml? 

See footer.

-- Scott




More information about the users mailing list