Shibboleth Developers

["Scott Cantor" <>]

Attached is a first draft of a pair of SAML attribute profiles for mapping
eduPerson and related bits to SAML 1.x and SAML 2.0.

The 1.x profile is mostly documenting current practice on the wire, bad or
unpopular decisions notwithstanding.

The 2.0 profile is a stab at "the way we want it to be" and should be
carefully vetted well before we put anything on the wire and end up
committed to it.

eduPersonTargetedID is a problem for both profiles, and my proposal needs
debate, particularly whether to start supporting a "new" syntax in the 1.x
profile or just leave it imperfect and wait for 2.0. This depends to some
extent on expected volume of use. But we need to decide quickly if a new
syntax is to be supported in Shibboleth 1.3.

This proposal formalizes all the stuff on the wire that isn't in the
Shibboleth spec at this point, so it's a key piece of the puzzle to get
published.

-- Scott

Attachment: draft-internet2-mace-dir-eduPerson-SAML-01.pdf
Description: Adobe PDF document