Skip to main content

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]
Re: [higgins-dev] Higgins for SAML2 SP - Which SAML profiles are supported?

Hello Geir,
 
The Higgins SAML2 IdP Solution supports a subset of the SAML 2.0 specifications. It consists of the following projects:
- org.eclipse.higgins.saml2idp.saml: Partial implementation of the protocol itself
- org.eclipse.higgins.saml2idp.server: Implementation of an IdP
- org.eclipse.higgins.saml2idp.test: Implementation of a RP
 
The RP part in Higgins (the org.eclipse.higgins.saml2idp.test project) does not support backchannel communication or artifact resolution. It sends authentication requests using the HTTP Redirect binding and consumes assertions via the HTTP POST binding.
 
The IdP part has been tested with several relying parties and offers a number of configuration options as well as the possibility to authenticate users against any technology for which a Higgins context provider exists. A web UI for configuring the IdP is currently under development.
 
See here for more information and links: http://wiki.eclipse.org/SAML2_IdP
 
Hope this helps,
 
Markus
 
On 1/24/08, Geir Amdal <geir.amdal@xxxxxxxxxxx> wrote:
Hi!

I am a Java developer at the University of Oslo, currently involved
in migrating the federated authentication support (SP/RP
functionality) in some of our web applications from a proprietary
protocol to SAML2. The IdPs our SPs will be contacting are national
instances not under our control, running Sun Access Manager (or
possibly the new FAM version).

I was only recently made aware of Higgins, and have a few questions
about the SAML2 support it offers:
- Does the current version of Higgins have any RP side support for
backchannel communication, or is it only intended to offer the HTTP
POST profile for Assertion consumption? (One of the IdPs our RPs are
connecting to requires backchannel/HTTP Artifact resolution for
Assertions.)
- How mature and complete would you classify the SAML2 portions of
Higgins as being in the current version?


Sincerely,

.gAm
--
Geir Amdal  <geir.amdal@xxxxxxxxxxx>               [there is no spool]
Java/JEE developer
Center for Information Technology Services
University of Oslo, Norway



_______________________________________________
higgins-dev mailing list
higgins-dev@xxxxxxxxxxx
https://dev.eclipse.org/mailman/listinfo/higgins-dev


Back to the top