Using the IdP behind Entra?

[Cantor, Scott]

> It's entirely possible I've reversed the directional terminology;
> I was thinking of it from the user's perspective where they
> would have Entra as the login UX, but the SPs and applications
> are still interacting with the IdP. Would this be proxying the
> authentication from the IdP's perspective?

It's conventionally described in terms of flow/sequence. The app talks to Shibboleth first, ergo it's "in front of" Entra, which is the second hop.

-- Scott