[JIRA] Updated: (IDP-115) Create an authentication workflow action that validates a user's X.509 certificate

[Chad La Joie (JIRA)]

     [ https://issues.shibboleth.net/jira/browse/IDP-115?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Chad La Joie updated IDP-115:
-----------------------------

           Description: 
Create an action that validates a X.509 certificate, given via the X509CertificateSubcontext located on the authn request context.  The validation itself should be performed by a pluggable OpenSAML trust engine.  If the certificate validates then set a X500Principal as the authenticated principal of the authn request context.

Additional notes:
 * need to determine how much PKIX "magic" to support (e.g., just CRLS or also OCSP)

  was:
Create an action that validates the username/password, given via the UsernamePasswordSubcontext on the authn request context, against a Kerberos domain.  If the credentials properly validate then set a UsernamePrincipal as the authenticated principal of the authn request context.

Additional notes:
 * ability to catch locked/disabled accounts and expired passwords

    Remaining Estimate: 1 week  (was: 1 day)
     Original Estimate: 1 week  (was: 1 day)

> Create an authentication workflow action that validates a user's X.509 certificate
> ----------------------------------------------------------------------------------
>
>                 Key: IDP-115
>                 URL: https://issues.shibboleth.net/jira/browse/IDP-115
>             Project: Identity Provider
>          Issue Type: Task
>          Components: Authentication
>            Reporter: Chad La Joie
>            Assignee: Chad La Joie
>            Priority: Blocker
>             Fix For: 3.0.0
>
>   Original Estimate: 1 week
>  Remaining Estimate: 1 week
>
> Create an action that validates a X.509 certificate, given via the X509CertificateSubcontext located on the authn request context.  The validation itself should be performed by a pluggable OpenSAML trust engine.  If the certificate validates then set a X500Principal as the authenticated principal of the authn request context.
> Additional notes:
>  * need to determine how much PKIX "magic" to support (e.g., just CRLS or also OCSP)

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira