<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
Hi Greg,</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
The confusion here is that "Shibboleth" doesn't refer to a single piece of software, it's an overarching brand for a few distinct software packages (the Shibboleth SP, the Shibboleth IDP, and the Shibboleth Metadata Aggregator).</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
They're not a common codebase, and typically, you're only running either the Service Provider (if you're trying to protect an application) or the Identity Provider (if you're a company or institution trying to run a login server).</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
Authoritative documentation for the IDP can be found here: <a href="https://wiki.shibboleth.net/confluence/display/IDP30" id="LPlnk974150">
https://wiki.shibboleth.net/confluence/display/IDP30</a><br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
Authoritative documentation for the SP can be found here: <a href="https://wiki.shibboleth.net/confluence/display/SP3" id="LPlnk604575">
https://wiki.shibboleth.net/confluence/display/SP3</a><br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
Based on what you've described, it sounds like you're interested in the Shibboleth SP. Using metadata (either statically loaded, or consumed dynamically if its signed by a trusted key), you can support logins from any number of IDPs. An overview of the SP's
configuration can be found here: <a href="https://wiki.shibboleth.net/confluence/display/SP3/Configuration" id="LPNoLP750168">
https://wiki.shibboleth.net/confluence/display/SP3/Configuration</a><br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
Best,<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
Michael<br>
</div>
<div id="appendonsend"></div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> users <users-bounces@shibboleth.net> on behalf of Graham Leggett <minfrin@sharp.fm><br>
<b>Sent:</b> Wednesday, April 24, 2019 9:08 AM<br>
<b>To:</b> Shib Users<br>
<b>Subject:</b> [External] Re: Can a Shibboleth service provider present itself as a SAML identity provider for federation?</font>
<div> </div>
</div>
<div class="BodyFragment"><font size="2"><span style="font-size:11pt;">
<div class="PlainText">On 24 Apr 2019, at 15:17, Cantor, Scott <cantor.2@osu.edu> wrote:<br>
<br>
>> Can Shibboleth present itself as a federated SAML2 IDP? The documentation seems to suggest it can, but then stops
<br>
>> short of telling me how.<br>
> <br>
> Where is there any SP documentation that implies that it acts as an IdP?<br>
<br>
<a href="https://www.shibboleth.net/index/basic/">https://www.shibboleth.net/index/basic/</a> - most specifically "Federated Single Sign-on”.<br>
<br>
Regards,<br>
Graham<br>
—<br>
<br>
</div>
</span></font></div>
</body>
</html>