Shibboleth Developers

[Will Norris <>]

As many people are aware, we've been working for the last few months to add 
OpenID support to the Shibboleth IdP.  I'm happy to say that we have an 
initial IdP extension that is ready for testing by the general Shibboleth 
community.

In the process of developing this extension, we identified a number of APIs 
in Shibboleth that cause considerable headache for supporting non-SAML and 
non-XML based protocols.  This is important to note for two reasons.  First, 
it means that not all the features we set out to support are included in this 
initial release.  Of particular note, there is currently no support for user 
attributes.  Second, as we continue to work out these issues, I expect the 
extension to change quite considerably in future releases... in terms of 
code, configuration, as well as features.

This initial release is provided as a proof of concept, and should be treated 
as such.  It is not recommended to use this in anything remotely resembling a 
production deployment.  While we are committed to continuing this work, and 
intend to provide an OpenID solution of the quality people have come to 
expect of Shibboleth, this initial release is most certainly not it.

Will that being said, you can read more about the IdP OpenID Extension at:

https://spaces.internet2.edu/display/SHIB2/IdP+OpenID

Please direct any questions and feedback to this mailing list 
(shibboleth-dev).