<html><body><div style="font-family: arial, helvetica, sans-serif; font-size: 12pt; color: #000000"><div style="font-family: arial, helvetica, sans-serif; font-size: 12pt; color: #000000" class="10">Hello, <br data-mce-bogus="1"></div><div style="font-family: arial, helvetica, sans-serif; font-size: 12pt; color: #000000" class="10">I recently echange here about my experiences on shibboleth IDP4 with DocuSign SP (cf my howto: <a href="https://www-public.imtbs-tsp.eu/~procacci/dok/doku.php?id=docpublic:systemes:shibboleth:docusign">https://www-public.imtbs-tsp.eu/~procacci/dok/doku.php?id=docpublic:systemes:shibboleth:docusign</a>) <br data-mce-bogus="1"></div><div style="font-family: arial, helvetica, sans-serif; font-size: 12pt; color: #000000" class="10">I noticed that usually SP vendors don't provide Discocery Service/WAYF SP initiated SSO (has we are used in academic/reserch ecosystem) <br data-mce-bogus="1"></div><div style="font-family: arial, helvetica, sans-serif; font-size: 12pt; color: #000000" class="10">so they ask us to register as many IDP as we have universities/school in ou group of federated IDPs . <br data-mce-bogus="1"></div><div style="font-family: arial, helvetica, sans-serif; font-size: 12pt; color: #000000" class="10">I came accross those pages: </div><div style="font-family: arial, helvetica, sans-serif; font-size: 12pt; color: #000000" class="10"><br data-mce-bogus="1"></div><div style="font-family: arial, helvetica, sans-serif; font-size: 12pt; color: #000000" class="10">https://wiki.shibboleth.net/confluence/display/KB/Using+SAML+Proxying+to+another+IdP</div><div id="zimbraEditorContainer" style="font-family: arial, helvetica, sans-serif; font-size: 12pt; color: #000000" class="10"><a href="https://spaces.at.internet2.edu/display/GS/SAMLIdPProxy">https://spaces.at.internet2.edu/display/GS/SAMLIdPProxy</a> (quite old, I guess I should stick with the 1rst one ...) <br></div><div style="font-family: arial, helvetica, sans-serif; font-size: 12pt; color: #000000" class="10"><br data-mce-bogus="1"></div><div style="font-family: arial, helvetica, sans-serif; font-size: 12pt; color: #000000" class="10">Do you think that's a right choice to circumvent the lack of DS/WAYF , by registering only One proxied IDP to the vendor SP and let that proxied IDP do the job to delegate authN to our locals federation end users IDPs ? </div><div style="font-family: arial, helvetica, sans-serif; font-size: 12pt; color: #000000" class="10"><br data-mce-bogus="1"></div><div style="font-family: arial, helvetica, sans-serif; font-size: 12pt; color: #000000" class="10">Or would it be better/simpler to present to the vendor SP only One IDP that has access to each schools end users referentials (ldap) </div><div style="font-family: arial, helvetica, sans-serif; font-size: 12pt; color: #000000" class="10"><a href="https://wiki.shibboleth.net/confluence/display/IDP30/LDAPAuthnConfiguration#LDAPAuthnConfiguration-MultipleDirectories">https://wiki.shibboleth.net/confluence/display/IDP30/LDAPAuthnConfiguration#LDAPAuthnConfiguration-MultipleDirectories</a> (I guess it works also in IDPv4) <br data-mce-bogus="1"></div><div style="font-family: arial, helvetica, sans-serif; font-size: 12pt; color: #000000" class="10">or<br data-mce-bogus="1"></div><div style="font-family: arial, helvetica, sans-serif; font-size: 12pt; color: #000000" class="10">https://github.com/ConsortiumGARR/idem-tutorials/blob/master/idem-fedops/HOWTO-Shibboleth/Solutions/HOWTO%20Configure%20a%20Shibboleth%20IdP%20v3.2.1%20to%20authenticate%20Users%20existing%20on%20different%20LDAP%20Servers.md<br data-mce-bogus="1"></div><div style="font-family: arial, helvetica, sans-serif; font-size: 12pt; color: #000000" class="10"><br data-mce-bogus="1"></div><div style="font-family: arial, helvetica, sans-serif; font-size: 12pt; color: #000000" class="10">I'am at the starting point to go into the direction of Proxy IDP or a single IDP with multiple ldap directories, which would be a better choice ? <br data-mce-bogus="1"></div><div style="font-family: arial, helvetica, sans-serif; font-size: 12pt; color: #000000" class="10"><br data-mce-bogus="1"></div><div style="font-family: arial, helvetica, sans-serif; font-size: 12pt; color: #000000" class="10">thanks for you advice . </div></div></body></html>