Debugging SAML to OIDC ACR proxying

[Scott Cantor]

Well, I can't really speak to the IdP->Entra hop or whether you'd ever get MS to do anything sensible, though they certainly don't for SAML, and I'd have no expectation they would without SAML.

Having said that, the other bit is that it will take extra work to handle what's coming back and get the result populated with Principals that work for SAML as well, but hopefully if you scripted that originally via that TranslationStrategyEx hook, it shouldn't be too hard to manage that additional bit of work.

If you ever posted that script you got working, I don't know if I ever saw it. I would probably be ok taking that and turning it into a HowTo with some additional work added to get it handling both protocols.

-- Scott