Shibboleth Developers

[Chad La Joie <>]

On 10/20/10 7:18 AM, Peter Schober wrote:
> * Nate 
> Klingenstein<>
>   [2010-10-18 10:06]:
> > >         -- summary, look at Idaho Java SP (Nate)
> >
> > I grabbed a copy of the JBoss-SAML implementation that was
> > contributed by Nick Newman from Idaho National Labs and brought it
> > up and running.  The process would have been quite fast and painless
> > were it not for several beta-ish hitches I uncovered during the
> > testing process, including:
>
> Is there the expectation, that people would actually switch containers
> to SAML-enable their Java apps? Or is this just an evaluation of one
> (way to implemenent an) SP and there will be more testing of others?

It was just some testing that Nate did.  We aren't planning to develop a 
Java SP so he took a bit of time to see if this SP was useful. 
Currently, it's probably not.

> > >         -- TestShib and ICAM testing (Nate)
> >
> > John Bradley has asked me to examine the possibility of using
> > TestShib as SAML test endpoints for the ICAM SAML profile.  There's
> > a handful of requirements that he'd like to put into the interop
> > testing that Shibboleth proper can't support right now.  As such,
> > I'm going to be cobbling together over the next week or two a
> > separate testing facility on TestShib.
>
> If that's the actual testshib instance that breaks anytime someone
> feeds it invalid metadata I guess it won't be of any real value.
> If that's a seperate instance of the software, where's the benefit of
> you doing it (or calling it testshib), instead of, anyone else setting
> up an SP?

ICAM offers almost no value to the Shibboleth project.  They just asked 
us to set it up, Nate had some spare cycles (somehow) and so he did. 
Maybe the real question should be, why couldn't the product vendors that 
are participating in ICAM set up something like this in short order.

--
Chad La Joie
http://itumi.biz
trusted identities, delivered