Shibboleth Developers

[Peter Murray <>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I'm going to throw some language out here that will likely be
technically imprecise, but please stick with me.  The core question is
"can a software agent to assert a user's attributes to another SP?"

The use case goes something like this:  a student is using a metasearch
engine (a service that sends searches to several database service at the
same time) to conduct a broadcast search across a variety of SPs.  From
the student browser's perspective the metasearch engine is an SP and
attributes from the student's IdP are presented to the metasearch engine.

To the destination SPs (receiving the broadcast search), the metasearch
engine appears as a browser.  (For the sake of this discussion, the
interaction between the metasearch engine and the destination SP could
be one of HTML-scraping result sets or a more sophisticated dialog.)

So, another way to ask the core I think is this:  "does the metasearch
engine, acting as an SP, have enough information to turn around an act
as if it were an IdP to the destination SPs?"

Or, on a Friday evening, should I hang it all up and head to the local
bar until it all makes sense?


Peter
- --
Peter Murray                       http://www.pandc.org/peter/work/
Assistant Director, Multimedia Systems  tel:+1-614-728-3600;ext=338
OhioLINK: the Ohio Library and Information Network   Columbus, Ohio
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (Darwin)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFCO4Ez4+t4qSfPIHIRAvKPAJ0eK776/FbiKv85z89JcQiNIa/lCQCfcn/5
jpyDOUCC7R2y3q9Ba+VpES8=
=BvCv
-----END PGP SIGNATURE-----