InCommon Technical Discussions

[Nick Roy <>]

On 9/7/18 12:45 PM, Cantor, Scott wrote:
> On 9/7/18, 2:38 PM, 
> "
>  on behalf of Pahls, Matt" 
> <
>  on behalf of 
> >
>  wrote:
> 
>> Has anyone used Microsoft Azure Enterprise SAML apps to federate with 
>> inCommon?
> 
> With PowerShell scripting it's probably possible, but it's painful at best 
> and pointless for what you're asking about.
> 
>> We have a vendor that will only interact if we are partnered at a 
>> federation level with inCommon. 
> 
> If they insisted that your metadata be published by InCommon to use it, 
> that has nothing to do with what software you use or how you federate with 
> them, at least in the event that the metadata from Azure is enough of a fit 
> with the feature set InCommon allows. ADFS' certainly is.


Azure AD is not compatible with InCommon's requirements for publishing
IdP metadata. However, there are companies like Cirrus Identity that
will proxy Azure AD's IdP into InCommon for you.

Best Regards

Nick Roy
Director of Technology and Strategy, InCommon

> 
> This is normally something that happens in reverse. An SP running 
> commercial, broken SAML software can't consume SAML (or at least 
> InCommon's) metadata, but that has nothing to do with my IdP's ability to 
> consume their metadata from InCommon or to benefit from that.
>  
> -- Scott
> 
>