Shibboleth Developers

["RL 'Bob' Morgan" <>]

Among many innaresting discussion items at last week's TERENA meeting re
web authn/z, this URL was pointed out:

  http://uk.jstor.org/

which, if you follow the "Access via Athens" link, leads to a page hosted
by Athens but labelled as JSTOR.  Note that this page also attempts to
deal with the multiple-methods problem, by providing a non-authenticating
link for those "on the campus of a participating institution".

In the Shib/InCommon scenario this would be the WAYF page, and the center
section would be the pick-your-origin part.  Conceivably the set of
possible origins could even be those appropriate to JSTOR.  This implies
InCommon having a fairly tight relationship as a service provider to a
target like JSTOR, ie having local storage of target-specific material.
As architects I think we shy away from this kind of icky intermingling,
but obviously there is a business case for it.

(In fact this might even be a very WAYF-like page in Athens too, see

  http://www.athensams.net/development/devolved_authentication/

for "Athens devolved authentication" which supports federation-style authn
in Athens.)

 - RL "Bob"


------------------------------------------------------mace-shib-design-+
For list utilities, archives, subscribe, unsubscribe, etc. please visit the
ListProc web interface at 

    http://archives.internet2.edu/

------------------------------------------------------mace-shib-design--