Hi, <div>Google cannot work as a SAML IdP per se, even though it supports SAML 2.0 as a service provider (from your IdP to Google Apps).<div><br></div><div>If you want to delegate the authentication to you Idp to Google Apps, you would have to implement OAUTH (<a href="https://developers.google.com/accounts/docs/AuthForWebApps">https://developers.google.com/accounts/docs/AuthForWebApps</a>) as an authentication provider for IdP. It's possible technically speaking I think.</div>
<div><br></div><div>Y.</div><div><br></div><div><br><div><br><div class="gmail_quote">On Tue, Oct 9, 2012 at 10:55 PM, Oleg Chaikovsky <span dir="ltr"><<a href="mailto:oleg.chaikovsky@aegisusa.net" target="_blank">oleg.chaikovsky@aegisusa.net</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">I have seen the large amounts of information about connecting Google<br>
Apps via Shib which is fairly straightforward at this point. Google Apps<br>
as an SP.<br>
<br>
So - now - if a group wanted to make their Google Apps domain to be the<br>
primary identifier for all of their other apps - would that simply be<br>
using external auth through the IdP? Simple as that? I keep thinking<br>
there must be more to it but all info I have read on the Wiki points to<br>
that model. (there are no additional attributes to consider in this idea).<br>
<span class="HOEnZb"><font color="#888888"><br>
--<br>
Oleg Chaikovsky<br>
<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</font></span></blockquote></div><br></div></div></div>