<div dir="ltr">Is anyone doing it with a "federated proxy" (i.e. <a href="http://aws.amazon.com/code/8383453795065208">http://aws.amazon.com/code/8383453795065208</a> )<div>It's not clear to me what advantage this proxy provides..</div>
<div><br></div><div>Liam</div></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Wed, Jul 2, 2014 at 1:47 PM, Jim Fox <span dir="ltr"><<a href="mailto:fox@washington.edu" target="_blank">fox@washington.edu</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="HOEnZb"><div class="h5"><br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
I’ve been asked whether our IdP can readily support AWS logins as outlined<br>
in:<a href="http://docs.aws.amazon.com/STS/latest/UsingSTS/STSMgmtConsole-SAML.html" target="_blank">http://docs.aws.amazon.com/<u></u>STS/latest/UsingSTS/<u></u>STSMgmtConsole-SAML.html</a> and<br>
<a href="http://blogs.aws.amazon.com/security/post/TxRTTT5PLUE6B5/How-to-use-Shibboleth-for-single-sign-on-to-the-AWS-Management-Console" target="_blank">http://blogs.aws.amazon.com/<u></u>security/post/TxRTTT5PLUE6B5/<u></u>How-to-use-Shibboleth-for-<u></u>single-sign-on-to-the-AWS-<u></u>Management-Console</a><br>
<br>
A quick read gave me the impression it should almost straightforward, but I would appreciate hearing from other institutions with generic<br>
Shibboleth IdP (i.e., not hosted at AWS) that have succeeded (or failed!) providing institutional authN/attributes to AWS service via<br>
institutional IdP.<br>
<br>
</blockquote>
<br></div></div>
I did this a month or so ago. It worked as advertised.<span class="HOEnZb"><font color="#888888"><br>
<br>
Jim</font></span><br>--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br></blockquote></div><br></div>