It would be nice if Ipsilon could used as a SP, connecting it to one or more pre-existing IdPs. This would allow Ipsilon to be used for federation services like Kennisnet Entree or SURFconext.

Exposing the available IdPs using a REST API would also allow automated configuration of said IdPs. This would be useful when for example customers want to use their own IdP for services behind Ipsilon alongside your own IdP for customers that don't run a IdP themselves.