...
Proxy-Based Design: Central to AARC compliance is the implementation of Service Provider-Identity Provider Proxies (SP-IdP-Proxies) that serve as intermediary services between identity providers and service providers. These proxies handle protocol translation, attribute aggregation , and policy enforcement, whilst presenting a unified interface to both users and services.
...