I need to allow adfs user to login in php based application.We can integrate SimpleSAMLphp for this purpose but all we need to make Relay Trust Connection through SAML metadata on ADFS server but we can't do that as client don't allow for this. I didn't found any way to authenticate ADFS user by any single api that we pass user credentials and will get ADFS response is user authorised or not?
Even I don't need any user details from ADFS server only to check weather the user is valid or not?
Need more detail.
This works no problem.
Application --> simpleSAMLphp --> ADFS
What does not work?
SAML does "pass user credentials and will get ADFS response is user authenticated or not".
You need to use roles in the SAML assertions to handle authorisation.