Re: [DG-Concordia] Rev of Deployment Guideline for Proxying SAML & OpenID
A while back I had a brief thread with SURFNet's Joost Van Dijk about some PoC work there that involved OpenID & SAML proxying. The deployment guideline seemed of interest , albeit a bit early at the moment. In addition to SURFnet, Joost pointed me to Spain's RedIRIS - http://yo.rediris.es/ (although its not clear to me that its SAML & OpenID that are being bridged, or OpenID and the internal PAPI....) Paul On 2/5/2010 9:36 AM, Scott Cantor wrote:
Tatsuki Sakushima wrote on 2010-02-05:
Sorry for not so active to updating this document. I have heard that InCommon or Internet2 is experimenting SAML/OpenID interop similar to what this document covers. They might focus more on authentication assertions not authentication policies. Do you know about the experiment?
Hmm, I don't know what you're referring to (and I'd know). We don't tend to do gateways, and other than Shibboleth starting to implement some OpenID code in the IdP, there's nothing else I can think of that would fit your description.
-- Scott
No virus found in this incoming message. Checked by AVG - www.avg.com Version: 9.0.733 / Virus Database: 271.1.1/2668 - Release Date: 02/04/10 14:35:00
Hi, Paul Madsen wrote, On 2/5/10 3:47 PM:
A while back I had a brief thread with SURFNet's Joost Van Dijk about some PoC work there that involved OpenID & SAML proxying. The deployment guideline seemed of interest , albeit a bit early at the moment.
As it happens, Joost (cc.) is finishing his report (in Dutch) on that PoC today. If you're interested, you can contact him. I bet he wouldn't mind to provide some comments in English to you on the results. Regards, Hans Zandbelt - SURFnet/SURFfederatie
In addition to SURFnet, Joost pointed me to Spain's RedIRIS - http://yo.rediris.es/ (although its not clear to me that its SAML & OpenID that are being bridged, or OpenID and the internal PAPI....)
Paul
On 2/5/2010 9:36 AM, Scott Cantor wrote:
Tatsuki Sakushima wrote on 2010-02-05:
Sorry for not so active to updating this document. I have heard that InCommon or Internet2 is experimenting SAML/OpenID interop similar to what this document covers. They might focus more on authentication assertions not authentication policies. Do you know about the experiment?
Hmm, I don't know what you're referring to (and I'd know). We don't tend to do gateways, and other than Shibboleth starting to implement some OpenID code in the IdP, there's nothing else I can think of that would fit your description.
-- Scott
No virus found in this incoming message. Checked by AVG - www.avg.com Version: 9.0.733 / Virus Database: 271.1.1/2668 - Release Date: 02/04/10 14:35:00
------------------------------------------------------------------------
_______________________________________________ DG-Concordia mailing list DG-Concordia@kantarainitiative.org http://kantarainitiative.org/mailman/listinfo/dg-concordia
-- Hans Zandbelt hans.zandbelt@surfnet.nl SURFnet http://www.surfnet.nl
Thanks Hans, Joost, any and all info is appreciated Regards Paul p.s. in Dutch federations, are the Idp & SP expected to cover their own deployment costs? http://bit.ly/CdaNb :-) On 2/5/2010 10:31 AM, Hans Zandbelt wrote:
Hi,
Paul Madsen wrote, On 2/5/10 3:47 PM:
A while back I had a brief thread with SURFNet's Joost Van Dijk about some PoC work there that involved OpenID& SAML proxying. The deployment guideline seemed of interest , albeit a bit early at the moment.
As it happens, Joost (cc.) is finishing his report (in Dutch) on that PoC today. If you're interested, you can contact him. I bet he wouldn't mind to provide some comments in English to you on the results.
Regards,
Hans Zandbelt - SURFnet/SURFfederatie
In addition to SURFnet, Joost pointed me to Spain's RedIRIS - http://yo.rediris.es/ (although its not clear to me that its SAML& OpenID that are being bridged, or OpenID and the internal PAPI....)
Paul
On 2/5/2010 9:36 AM, Scott Cantor wrote:
Tatsuki Sakushima wrote on 2010-02-05:
Sorry for not so active to updating this document. I have heard that InCommon or Internet2 is experimenting SAML/OpenID interop similar to what this document covers. They might focus more on authentication assertions not authentication policies. Do you know about the experiment?
Hmm, I don't know what you're referring to (and I'd know). We don't tend to do gateways, and other than Shibboleth starting to implement some OpenID code in the IdP, there's nothing else I can think of that would fit your description.
-- Scott
No virus found in this incoming message. Checked by AVG - www.avg.com Version: 9.0.733 / Virus Database: 271.1.1/2668 - Release Date: 02/04/10 14:35:00
------------------------------------------------------------------------
_______________________________________________ DG-Concordia mailing list DG-Concordia@kantarainitiative.org http://kantarainitiative.org/mailman/listinfo/dg-concordia
No virus found in this incoming message. Checked by AVG - www.avg.com Version: 9.0.733 / Virus Database: 271.1.1/2669 - Release Date: 02/05/10 02:35:00
participants (2)
-
Hans Zandbelt -
Paul Madsen