<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Arial","sans-serif";
color:windowtext;}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif"">We have a requirement for cross-federation interoperability (allow IdPs in one federation to authenticate its users to access SPs in another federation), after some poking
around I stumbled across this link which introduces the concept of a SAML IdP Proxy:
<a href="https://spaces.internet2.edu/display/GS/SAMLIdPProxy">https://spaces.internet2.edu/display/GS/SAMLIdPProxy</a>
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif""><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif"">This sounds like a promising approach to enable cross-federation interoperability but I’d like to learn more. Is there any documentation available about how to implement this
pattern using the Shibboleth IdP and SP? Can you share any examples of where the SAML IdP proxy is implemented in the real world?
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif""><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif"">I appreciate any additional detail you’re able to provide.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif""><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif"">Thanks,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:black">-Andrew<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:black"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:12.0pt;color:black">Andrew T. Owen</span></b><span style="color:black">
<br>
<b>Information Sharing Architecture Specialist</b><br>
<i>SEARCH, The National Consortium for Justice Information and Statistics</i> <br>
916.215.3933 / </span><u><span style="color:blue"><a href="mailto:andrew@search.org"><span style="color:blue">andrew@search.org</span></a></span></u><span style="color:black"> /
</span><span style="color:blue"><a href="www.search.org"><span style="color:blue">www.search.org</span></a></span><span style="color:black">
<b><o:p></o:p></b></span></p>
<p class="MsoNormal"><a href="https://twitter.com/#!/aowen355"><span style="color:blue;text-decoration:none"><img border="0" width="20" height="19" id="Picture_x0020_1" src="cid:image001.png@01CE1E2C.2B96A3D0" alt="twitter"></span></a><span style="color:blue">
</span><a href="http://www.facebook.com/SEARCH.org"><span style="color:blue;text-decoration:none"><img border="0" width="19" height="19" id="Picture_x0020_2" src="cid:image002.png@01CE1E2C.2B96A3D0" alt="Description: cid:image002.png@01CCA45D.04673C10"></span></a><span style="color:blue"> </span><a href="http://www.linkedin.com/groups/SEARCH-National-Consortium-Justice-Information-3251705"><span style="color:blue;text-decoration:none"><img border="0" width="19" height="19" id="Picture_x0020_3" src="cid:image003.png@01CE1E2C.2B96A3D0" alt="Description: cid:image003.png@01CCA45D.04673C10"></span></a><span style="color:blue"><o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>