Presence and IntComm WG

[Peter Saint-Andre <>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 2/16/12 6:39 AM, Tom Scavo wrote:
> On Wed, Feb 15, 2012 at 2:32 PM, Peter Saint-Andre
> <>
>  wrote:
>> 
>> I've been having some discussions with folks in other industries
>> about what I've been calling federation clearinghouses. I blogged
>> about it briefly here:
>> 
>> https://stpeter.im/journal/1445.html
> 
> You've pretty much just described a typical SAML federation (such
> as the InCommon Federation).

Which is precisely why it would be good to discuss in the XMPP
context. As far as I understand it, Shibboleth and related SAML
technologies all assume that federation occurs with HTTP as the
transport, whereas the folks I'm talking with want to do this with
XMPP natively. I want to make sure that the Jabberites don't reinvent
the wheel, and instead re-use existing patterns. For example, we could
make use of the recent work on SASL mechanisms for both SAML and OAuth
(since XMPP uses SASL for authentication).

>> Is this something that the Internet2 community might like to
>> explore?
> 
> We're already doing it for the SAML protocol :-) There has been
> some discussion about including RADIUS-based eduroam into the mix.

You're doing it for HTTP, not for XMPP or any other application
protocol (and as far as I can see, SAML is a markup language, not an
application protocol).

Peter

- -- 
Peter Saint-Andre
https://stpeter.im/


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk89IyAACgkQNL8k5A2w/vwZogCgz0gCoH/PY09T3OEAlzEUf4Yc
wmEAoOyi8/jzF5EaSc0SqTIaf09D5Zet
=F+cx
-----END PGP SIGNATURE-----