Shibboleth Developers

["RL 'Bob' Morgan" <>]

> 3) Status of documentation, old and new

A quick report on some of this.

A key item for us is to retire the "v5" Shib architecture doc which is now
obsolete and misleading in many ways.  Scott did the first step of this by
producing a new draft protocol spec a couple of months ago that makes
clear that protocol-wise Shib is a profile and modest extension of SAML
1.1.  This is to be accompanied by a "Shib Overview" doc that would update
the material in the first four section of arch-v05.  Target for this is to
have it available by the upcoming member meeting.

This has temporarily taken a backseat to an article we're producing for
Educause Quarterly, with a due date in a few days.  I'm working on this
(with much input from Walter, thanks), current outline is below.

 - RL "Bob

---

the eq paper

Shib system extends campus identity management so users can access web
  resources securely in multi-organizational settings

Shib project
  did scope, requirements, design in open process
  produced software and docs
  promotes adoption with campuses and RPs
  engages with standards bodies, industry groups, library community
  provides forum for support of the system
  continues

Shib system
  basic flow
  SP component
  IdP component
  federation support

implications for campus IT
    attr-based AC
    XML-based stds
    privacy mgt
    community-defined attributes
    realization of PKI potential for scalable trust mgt
    higher-ed-wide federation
    Grid-computing integration with IT infra
    directory integration
    federated methods in other (non-web) apps
    development via open collaboration of campus mware architects
      Signet, grouper as the next instances