SAML SSO - Secure Sideband Connections

So after a little research it looks like something like Penrose might be able to help with this. While this would be an early use case for this in our environment, I can see where this may be useful for future efforts so I may look into implementing Penrose to federate Active Directory and SQL data sources, and provide it via LDAPS. That said, I do wish there was more native data source support built into Access Policies :) In the short term however, if anyone has info on how I could best secure a sideband connection via HTTPS it would be appreciated...