OpenSAML user discussion

[Mark Allen Earnest <>]

Scott Cantor wrote:
>>Prasad, can you explain a bit more what you mean by "user
>>provisioning"?  Surely, a SAML service provider might create a user
>>account on the basis of a (strong) SAML assertion returned from a
>>(trusted) SAML identity provider, but that seems to defeat the purpose
>>of a SAML browser profile altogether.
> 
> Why? That's probably a good summation of a majority of the actual
> deployments out there, except that they probably don't create the account at
> the time of login, it's in advance.
> 
> In the sense that you can dynamically provision based on attributes/claims,
> that's certainly an obvious use of SAML to do "provisioning". 

This is exactly what webassign does with Shib, they build their local
account db dynamically as saml assertions come in.

-- 

Mark Allen Earnest

Lead Systems Programmer
Emerging Technologies
The Pennsylvania State University

KB3LYB

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature