Shibboleth Developers

Standard logistics:

Phone #:  800-998-2462
Pin #:  5601277

Agenda items:

1) status - 0.8 release
        - known issues/bugs?

2) v1.0 deliverables... Here's my current list: issues, questions, 
concerns......

1) Various improvements to error handling. The most noticeable will 
be that origin sites, when they join a federation, will be able to 
supply the url for a local "shib problem resolution" page; this url 
will be distributed in metadata to targets. When a target encounters 
an error, it will be able to substitute this url into an error 
template (replacing a new variable -- origin_error_url).

2) Improved target side robustness. There will be a new SHAR option, 
allowing the SHAR to store its session and attribute cache in 
permanent backing store (in addition to the current in-memory option).

3) OpenSAML will populate the AuthnType element in the SAML Subject 
element. Origin sites will supply the value with a configuration 
directive.

4) OpenSAML - origin sites whose HS cert is NOT signed by one of the 
trusted roots will be able to provide InCommon with the HS' cert; 
targets will be able to use this cert to validate the HS' signature.

4) Extend the Attribute Authority implementation, providing backend 
attribute plugins. This should greatly simplify the process of 
extending the AA to support additional atributes.

5) Target side -- should we do this? -- use local time string values 
in the target side log files.

6) (possibly) support for using W2K and  Apache as a target (Aaron's work)

------------------------------------------------------mace-shib-design-+
For list utilities, archives, subscribe, unsubscribe, etc. please visit the
ListProc web interface at 

   http://archives.internet2.edu/

------------------------------------------------------mace-shib-design--