Shibboleth / IdP Delegated Authentication

At some point we will be required to support outside authentication mechanisms like Facebook, OpenID, Yahoo, etc. Seems like the smoothest way to make this work would be to setup an IdP that allows for delegated authentication to these services.