Page History

...

• Questions to Stanford webauth group about idp integration are still unanswered.
  • AI: Paul - forward questions to Scotty and Bruce at Stanford. (sent 2/9/07)
• Is there a whitepaper that talks about the relationship of Grouper to Shibboleth?
  • See
    • http://www.educause.edu/upload/presentations/CAMP064/PS01/Cornell_Federation_Poster_V2.pdf^{Image Removed}
    • https://wiki.internet2.edu/confluence/pages/viewpage.action?pageId=2121^{Image Removed}
    • https://gate-test.library.lse.ac.uk/dspace/bitstream/1988/2805/2/sm-mg_SignetGrouper_briefing.pdf^{Image Removed}
    • http://www.educause.edu/upload/presentations/CAMP064/SEM01/20061107-tech-wshop-subsys-tree.ppt^{Image Removed}
    • http://www.educause.edu/upload/presentations/CAMP064/SEM01/20061107-tech-wshop-ldappc.ppt^{Image Removed}
    • https://wiki.internet2.edu/confluence/display/GrouperWG/Home^{Image Removed}

RISK Identified:

Wiki MarkupWill the number of redirects caused by using Stanford WebAuth as the authentication service have an unacceptable impact on the user experience? If it does, we could replace WebAuth with various Apache modules and write our own UI that would invoke these. Of course that means that we could not investigate the use of other \ [ZEST:not to be spoken of\] at a later date.

Shibboleth attribute release:

...

UI's for managing attribute release are covered in the Shibboleth wiki, Shibboleth ThirdPartyExtension, section.

https://spaces.internet2.edu/display/SHIB/ThirdPartyExtensions^{Image Removed}

http://www.federation.org.au/twiki/bin/view/Federation/IdPManagementSuite^{Image Removed}

Sharpe is for IdP admins

Autograph is for end users

https://spaces.internet2.edu/display/SHIB/SPAttributeConfi^{Image Removed} - no info about the UI but talks about some of the underlying technology

An alternate UI was also developed at USC:

http://sourceforge.net/projects/shib-autograph^{Image Removed}

• On Apr 19, 2006, at 6:57 PM, Brendan Bellina wrote:
  USC has completed development and testing of a patch for Shibboleth 1.3 that allows ARP's to be constrained by user attributes. The intent is to allow Identity Providers to constrain the unneeded or undesired release of attributes to service providers. A white paper describing what we have named "Rule Constraints" and the patch code is available at the website <http://isd.usc.edu/~bbellina/gds/software/shibboleth/^{Image Removed}>. Will Norris, who authored the patch, will be attending the Shib WG session at the upcoming I2 Member Meeting and will be available to answer any questions. We hope that this will prove to be a useful offering to the Shibboleth community and welcome any feedback.
  Regards,
  Brendan Bellina

Pasted from <https://mail.internet2.edu/wws/arc/shibboleth-dev/2006-05/msg00025.html>

Do we need Solaris and MacOS builds of Shibboleth? Scot Cantor recently wrote to the list indicating that the Solaris code may be a bit out of date and he does not have access to Solaris 10.

...