Shibboleth Developers

[Tom Scavo <>]

On Mon, Apr 4, 2011 at 1:00 PM, Cantor, Scott E. 
<>
 wrote:
> On 4/4/11 12:28 PM, "Tom Scavo" 
> <>
>  wrote:
>>FWIW, this is the kind of stuff I'd like to hear about at the Shib WG
>>session at I2MM in Arlington in a couple of weeks.
>
> That would necessitate people using them be there to present about them. I
> don't think anybody involved with the project is doing anything with it.

By "them" do you mean the handler contributed by Fredrik? That's a
fair question. I'll see what I can find out on the shib-users mailing
list and then I'll see if I can drum up some support to test the
handler internally.

Or by "them" do you mean the OATH protocols (HOTP, TOTP, OCRA)? The
latter question could be discussed at a high level, without much
deployment experience (although certainly deployment experience should
be factored into the decision).

Related to this, some folks from Surfnet will present at I2MM:

http://events.internet2.edu/2011/spring-mm/agenda.cfm?go=session&id=10001663&event=1035

Surfnet commissioned a smartphone app that scans QR codes:

http://www.egeniq.com/projects/mobile-authentication/

(In particular, see the video at the bottom of the above page.) Here's
the corresponding paper:

https://tnc2011.terena.org/getfile/114

Btw, the above project and demo revolves around SimpleSAMLphp.

>> What use cases and
>>protocols will you support, and yes, is there any chance any of this
>>could be incorporated into IdP v2.x?
>
> 2.3 is expected to be the final release of 2.x, and the scope of that
> doesn't include merging in any extensions we didn't write.

Bummer.

Tom