- DG-Concordia - mailman.kantarainitiative.org

Minutes from Mar 23 Concordia call
by Paul Madsen 24 Mar '10

24 Mar '10

http://kantarainitiative.org/confluence/display/concordia/2010-03-23+-+Call

1 0

NTT deck on SAML/OAuth Hybrid
by Paul Madsen 24 Mar '10

24 Mar '10

Covers the demo from the RSA KI workshop Comments welcome OAuth is currently experiencing some upheaval so the specific technical details of how the OAuth params & tokens are carried on SAML messages will certainly change. Paul

1 0

Deployment Guideline for Proxying Assurance between OpenID & SAML
by Paul Madsen 23 Mar '10

23 Mar '10

At the Portland F2F, there was agreement from those in attendance as to releasing the deployment guide [1] as a 'interim report'. Doing so would give the doc a semblance of status that might help in obtaining feedback outside of Concordia. Do those members who didn't attend the F2F have any concerns with this step? Paul [1] - http://kantarainitiative.org/confluence/display/concordia/Deployment+Guide+…

3 2

Agenda for March 23 Concordia call
by Paul Madsen 22 Mar '10

22 Mar '10

Call focused on logistics of publishing the results of the two surveys, and the proxying assurance deployment guideline - Tuesday, 23 March 2010 - EST 1:30-2:30pm - Skype: +9900827044630912 - North American Dial-In: +1-201-793-9022 | Room Code: 4630912 - International numbers are on Concordia DG wiki page 0) Roll 1) Approval of minutes http://kantarainitiative.org/confluence/display/concordia/Portland+March+9+… 2) Surveys Steps for publishing Will both surveys become 'interim reports' ? 3) Proxying assurance for OpenID/SAML guidelines Steps for publishing as 'interim report' 4) AOB

1 0

Minutes from Portland F2F
by Paul Madsen 22 Mar '10

22 Mar '10

wikified at http://kantarainitiative.org/confluence/display/concordia/Portland+March+9+… Paul

1 0

Concordia call
by Paul Madsen 16 Mar '10

16 Mar '10

According to my schedule, we will have a call next week Paul -- Paul Madsen e:paulmadsen @ ntt-at.com NTT p:613-482-0432 m:613-302-1428 aim:PaulMdsn5 web:connectid.blogspot.com

1 0

Re: [DG-Concordia] Most annoying pre-F2F video ever
by Brett McDowell 05 Mar '10

05 Mar '10

Are you sure this was produced by Stephen Colbert? I mean, what *could* they be thinking?!... shooting this in a pouring rain?! On Thu, Mar 4, 2010 at 8:35 PM, Scott Cantor <cantor.2(a)osu.edu> wrote: >> For those lucky enough to be staying at the SpringHill Suites, a video >> intro from 'Tara' >> >> http://www.youtube.com/watch?v=apSROqFzSaE >> >> Amazingly, it is raining at the time of filming > > I'm impressed they've managed to keep the YouTube comments so limited and > free of profanity. > > Their "On the Border" must be much better than the one in Columbus, I've > never seen anybody look that happy at one. > > -- Scott > > > _______________________________________________ > DG-Concordia mailing list > DG-Concordia(a)kantarainitiative.org > http://kantarainitiative.org/mailman/listinfo/dg-concordia >

2 1

Most annoying pre-F2F video ever
by Paul Madsen 04 Mar '10

04 Mar '10

For those lucky enough to be staying at the SpringHill Suites, a video intro from 'Tara' http://www.youtube.com/watch?v=apSROqFzSaE Amazingly, it is raining at the time of filming

2 1

No Concordia call
by Paul Madsen 23 Feb '10

23 Feb '10

Apologies for late notice but as we decided last call to keep the surveys open till post-RSA, and the only other agenda item from that call was the SAML/OpenID deployment guide - I'm proposing we cancel today's call in anticipation of the Portland meetings. Paul

1 0

Re: [DG-Concordia] Rev of Deployment Guideline for Proxying SAML & OpenID
by Joost Van Dijk 09 Feb '10

09 Feb '10

On 2/9/10 7:42 PM, Scott Cantor wrote: > Joost Van Dijk wrote on 2010-02-09: >> In this scheme, a user presenting an OpenID URL like >> >> https://openid.surfnet.nl/myuniversity/john >> >> would be redirected by the RP first to our gateway, then to the SAML IDP >> mapped from 'myuniversity', where the user needs to authenticate as >> 'john'. After returning on the gateway, before being sent back to the >> RP, it is checked that it was actually john who logged in. > > Ok, so your gateway is basically creating OpenIDs that facilitate mapping. I > was wondering also what the opposite direction looked like. How do your > (originally SAML) RPs handle OpenID users? Do they get EPPNs? SAML NameIDs? > Handle both types of IDs? > > -- Scott > > When accessing a SAML SP that allows guests, a user selects "OpenID" from the list of IDPs on the SP's WAYF. This entry points to the gateway, that will simply allow the user to enter his/her OpenID URL. In the checkid_setup request to the OpenID Provider, some attributes are requested using sreg or AX. If these are released in the response, they are mapped onto the SAML attributes used by the SAML SP. This list is now restricted to the following attributes: urn:mace:dir:attribute-def:uid urn:mace:dir:attribute-def:cn urn:mace:dir:attribute-def:displayName urn:mace:dir:attribute-def:mail The OpenID URL is mapped onto both the SAML subject and the uid attribute. By the way: this gateway is based on Feide's simpleSAMLphp, which is often used for bridging. -- Joost

1 0