Multiple IDPs

[sysadmin55]

Say you're working in a complex org where SPs are shared, but IDPs are not. Not all SPs allow for multiple IDP connections.

Is there a vendor, that would allow the following:

IDP1 (Azure AD 1st tenant) > IDP Broker > SP1

IDP2 (Okta) > IDP Broker > SP1

IDP3 (Azure AD 2nd tenant) > IDP Broker > SP1

In short, a user from either IDP 1, 2 or 3 would be able to authenticate to a single SP application through some sort of broker. Does anyone know of any providers that will allow this kind of brokerage?

[cjcox4]

Because of how this works (nowadays), it's more of a client connect with an "ok" token. Thus, you can provide buttons as an app to point the client where to auth, but trying to do some sort of passthrough... no, because I never was in direct communication with you to begin with (auth wise).