Presence and IntComm WG

[Tom Scavo <>]

On Thu, Feb 16, 2012 at 10:39 AM, Peter Saint-Andre 
<>
 wrote:
>
> ... we could
> make use of the recent work on SASL mechanisms for both SAML and OAuth
> (since XMPP uses SASL for authentication).

Can you be more specific?

>>> Is this something that the Internet2 community might like to
>>> explore?
>>
>> We're already doing it for the SAML protocol :-) There has been
>> some discussion about including RADIUS-based eduroam into the mix.
>
> You're doing it for HTTP, not for XMPP or any other application
> protocol (and as far as I can see, SAML is a markup language, not an
> application protocol).

SAML is indeed an application protocol but I think that's beside the
point. Practically speaking, InCommon's primary task is to manage
entity metadata (including such things as keys and endpoints), which
increases the security and usability of protocol transactions. I don't
know much about XMPP, but certainly that's where the value of
federation lies in any event, in providing trust services that enhance
security, privacy, usability, and so forth.

Tom