Shibboleth Developers

[André Cruz <>]

I think there are 2 approaches regarding Cardspace support.

Either Shibboleth's IdPs and RPs support the generation and reception  
of InfoCards and we have cardspace and SAML in parallel.

Or we support the reception of infocards when we login at the IdP and  
the rest of the process is SAML.

What approach were you thinking about? I think the second approach  
wouldn't be too hard and I was also interested in having an extension  
to allow OpenID logins... :)

André

On Feb 19, 2007, at 7:27 PM, Scott Cantor wrote:

> >  From my quick skimming of cardspace webpages at MSDN I have the
> > impression that it has a similar architecture since it has relying
> > parties and identity providers, etc... Please correct me if I'm
> > wrong. Has anyone thought  of how to leverage these two frameworks
> > and use them together. Like, will Shibboleth's IdP be able to issue
> > Cardspace cards?
>
> Shibboleth itself is not a distinct framework anymore. It's a piece of
> software that supports two basic protocols today, and three in the  
> next
> release. WS-Trust isn't one of those, at least initially.  
> Eventually the
> answer is maybe, or rather definitely if somebody writes the code,  
> whether
> it's us or not.
>
> There is little doubt you could write extensions for 1.3 that would  
> support
> it, the goal being that it will be easier to do that in 2.0.
>
> The broader answer is yes, lots of people have thought a lot about  
> the long
> term implications of Cardspace to SAML-based systems, some of the  
> Shibboleth
> team included. If you want to do that as well, you're more than  
> welcome to,
> perhaps on the -dev list.
>
> -- Scott