November 2009 - DG-Concordia - mailman.kantarainitiative.org

fixes to the SAML & OAuth Hybrid deck
by Paul Madsen 18 Nov '09

18 Nov '09

On the call yesterday, Scott pointed out the liklihood of typos in my deck exploring SAML/OAuth hybrid scenarios from IIW Enclosed is an updated draft that fixed a s/SP/IdP/ error and clarified that the SAML message from OAuth Consumer to OAuth SP carry OAuth request params, and not an unauthorized request token. Also at http://paulmadsen.posterous.com/saml-and-oauth-hybrid-v2 Thanks Paul

1 0

Agenda for Nov 17 Concordia DG call
by Paul Madsen 17 Nov '09

17 Nov '09

Hi , lets have a call - Tuesday, 17 Nov 2009 - UTC 5:30-6:30pm - Skype: +9900827044630912 - North American Dial-In: +1-201-793-9022 | Room Code: 4630912 - International numbers are on Concordia DG wiki page 0) Roll 1) Approval of minutes from last call http://kantarainitiative.org/confluence/display/concordia/Call+Oct+20+2009 2) LOA survey (Paul) - current draft http://www.surveymonkey.com/s.aspx?sm=7l4_2fBoAF3NLUwxYl6QyK3Q_3d_3d - under external review 3) Authz survey (John T) - current draft http://www.surveymonkey.com/s.aspx?sm=WqB7vvXYH2hGMkCCVO_2fudg_3d_3d (pwd k4nt474) - ready to go live? 4) Event planning - Aim for a workshop associated with industry event? - RSA in March 2010? - What focus? 5) SAML & OAuth 'hybrid' - as discussed at IIW - http://paulmadsen.posterous.com/saml-and-oauth-hybrid - interest from Concordia on next steps? 6) SAML/OpenID proxying assurance guideline - current draft http://bit.ly/1hkB63 - still needs review... 7) AOB

3 4

SAML & OAuth Hybrid explorations
by Paul Madsen 08 Nov '09

08 Nov '09

FYI, we had a discussion of possibilities for a 'SAML & OAuth Hybrid' at last week's IIW. The motivation & model is similar to the recent OpenID OAuth 'Hybrid' extension [1]) Deck from the IIW session at [2] Regards Paul 1 - http://step2.googlecode.com/svn/spec/openid_oauth_extension/latest/openid_o… 2 - http://paulmadsen.posterous.com/saml-and-oauth-hybrid

1 0