I'm Ken Rickard, a senior programmer/architect at Palantir.net, a
Drupal development firm based in Chicago.
We've done a lot of external auth work -- see http://palantir.net/experience/foreign-affairs
for example -- but this is our first exposure to SAML.
I'm working on an integration using SAML 2.0 as a remote SP. Ideally,
we would only be authenticating users against the iDp service, and not
actually logging them into Drupal.
(Keeping the account records in Drupal is not desirable, and I'd like
to avoid the performance hit of losing page cache.)
I think we can do this because we're only requiring authentication for
a single page, to start, and we can keep that from being cached.
I'm finding the documentation excellent, and almost have everything
working, running SimpleSAMLphp 1.5.
Just thought I would join the group to see what the current status
was. I am wondering if we'll have to do any special $_SESSION
handling, or if memcache session handling will work for our use case.
If you have any questions, I'm easy to find online or in IRC.
-- Ken Rickard
agentrickard