OpenSAML user discussion

["Scott Cantor" <>]

> I am new to opensaml and SAML 1.1. Does anyone have experience with 
> interoperability with SAML Authorities provided in various Access 
> Manager products such as:
> 
> -Sun Java Enterprise System Access Manager
> -IBM Tivoli Access Manager

OpenSAML isn't a complete product, it's a toolkit. It's not directly
comparable to those products. It "interops" in the sense that it creates
valid SAML, can sign and verify, etc.

Shibboleth is the more analagous set of components. We believe but haven't
tested that it is compatible with those products using the POST profile and
that if they support or supply an attribute query or authority
implementation, there should be some interop. There are some additional
constraints in place on Shibboleth components to foster real interop,
similar to some of the additional profiling in the Liberty ID-FF work, but
with less outright extension.

We are working on adding artifact profile support and have done some
successful early prototyping against some commercial implementations.

-- Scott