Using simpleSAMLphp as a SAML bridge

Andreas Åkre Solberg

Mon Oct 15 16:53:14 2007


Table of Contents

Setting up WebSSO bridges
Bridging SAML 2.0 <-> SAML 2.0
Bridging Shibboleth 1.3 <-> Shibboleth 1.3
Bridging Shibboleth 1.3 <-> SAML 2.0
Bridging SAML 2.0 <-> Shibboleth 1.3
Bridging SAML 2.0 <-> OpenID
Bridging Shibboelth 1.3 <-> OpenID

Setting up WebSSO bridges

simpleSAMLphp can be used to bridge between two WebSSO protocols. Here is some short descriptions of how to setup the different bridge configurations.

Bridging SAML 2.0 <-> SAML 2.0

In this setup you can bridge between two federations using SAML 2.0.

To approach this, you must configure both saml 2.0 IdP and SP hosted metadata, and in the IdP hosted metadata configure the auth parameter to be the SP initialization endpoint, like this:

		'auth'				=>	'saml2/sp/initSSO.php?idpentityid=sam.feide.no'

As you can see you specify the IdP in the remote federation as a parameter to the initalization endpoint.

Note

This section of the documentation is only a placeholder. There will be more detailed information added later. For now, ask the author if you want more details of such a setup.

Briding SAML 2.0 SLO is not implemented. Will be improved soon.

Bridging Shibboleth 1.3 <-> Shibboleth 1.3

Documentation will be added.

Bridging Shibboleth 1.3 <-> SAML 2.0

Documentation will be added.

Bridging SAML 2.0 <-> Shibboleth 1.3

Documentation will be added.

Bridging SAML 2.0 <-> OpenID

Documentation will be added.

Bridging Shibboelth 1.3 <-> OpenID

Documentation will be added.