Question

The problem is I have an standard SAML 2.0 Web-Profile IDP (a customized Shibboleth) that I can authenticate to Google Apps, nicely, but Microsoft decided to embrace-and-extend again, with WIF, so it seems things doesn’t work off-the-shelf to have web SSO (SingleSignOn) with Sharepoint.

At least all the documentation show only how to integrate with AD FS STSs, or how to write your own STS as the protocols around claims exchange aren’t standard.

From the overviews it seems feasible to have my IDP being called (redirected to) and returning the SAML response as a forced post, as usual, but it seems hard to tell WIF to just process the simple response we serve.

Thanks,

Answer 1

ADFS v2.0 does support SAML 2.0.

If the SP STS doesn’t support this, then simply add ADFS as a trusted provider to the SP STS.