Shibboleth Developers

[Peter Williams <>]

Well, I at 22 worked for a university college's commercialization arm (me and 
2 others). It was a dept of Computer Science, taking EC money in the late-80s 
days when "industry/university" funding was all the rage - and everyone had 
to have a "commercialization" arm (usually to try to meeting central funding 
shortfalls). So, we created a front company for the uni, accompanying the 
folks in the EE dept who were making one-off ultrasonic bat detectors for 
local victorian churches (literally). Technically we rented the desk I 
occupied from the university dept, which strangely was no different to the 
other researchers paid by more conventional means (some academic grant or 
other, won by merit).

I seem to remember tutoring lots of first year Iraqi CS students, trying to 
avoid being shot in the Iran/Iraq war, struggling to learn a math/logical 
basis for programming. Probably all MIA now, shot by someone else.

Someone offered me a "license" to get a joomla-plugin for some version of 
Shib, for $1500 - per server. Guessing it's a jip, from the comments.

Im perfectly well aware that how well shib (commercial version or otherwise) 
works with ws-fedp is a function of the knowhow of the folks, working here. 
How well DOES IT? Is the real question.

For example, a very obvious simpleSAML token decoder in joomla did NOT assume 
that multiple tokens MIGHT be a response - and thus cannot work with the MSFT 
"best practices" FP agent, which re-casts a upstream token  for the SP, 
having done (yet) some (more) claims transformation. The typical WIF-build FP 
agent happens to construct token encodings that the obvious script-based 
decoders FAIL to parse (and handle).

As a commercial user, Id be QUITE happy to pay $1500 for a "problem solver", 
having built in extensive interoperability testing.  Obviously, I don't want 
to pay $1500 for what is publicly available, dressed up for sale.


-----Original Message-----
From: 

 
[mailto:]
 On Behalf Of Chad La Joie
Sent: Wednesday, June 22, 2011 4:57 PM
To: 

Subject: Re: [Shib-Dev] how good is the Shib SP ws-fedp support?

Well, more to the point, there is not such thing as a "Shib commercialization 
arm".

On 6/22/11 7:50 PM, Peter Schober wrote:
> * Peter 
> Williams<>
>   [2011-06-23 01:45]:
>> I'm arguing ( within Rapattoni) for purchase of a commercial license 
>> for Shib, fronting Joomla, from the SHib commercialization arm.
>
> It's Apache 2.0 licensed. What more do you need?
> -peter
>

--
Chad La Joie
http://itumi.biz
trusted identities, delivered