Shibboleth SP support for OpenID implementation

[Michael Schwartz]

A few points on this, although I'm not a Shib Developer:

1) OpenID Connect 1.0 is the future of OpenID, it doesn't make sense to 
implement older verisons

3) A lot of work is happening with OpenID: There is an OpenID Connect 1.0 
Interop at the RSA conference coming up on 3/1. Approval of OAUTH 2.0 
standard is in progress IETF, and the OpenID Connect 1.0 related specs are 
pending at the OpenID Foundation. OpenID Connect 1.0 incorporates OAUTH 
2.0, but adds other needed pieces to the stack, like authentication, 
discovery, token format, cert formats, dynamic client registration.

4) If you would like to start experimenting with an OpenID Connect 1.0 
IDP, checkout the Open Source OX server: http://ox.gluu.org

5) It would be great if login could enable the generation of both a SAML 
session, and an OpenID connect session. But this will probably never be a 
feature of Shibboleth. The Trust Models are quite different.

With that said, I thinkg OpenID Connect 1.0 will be a big improvement. It 
allows user to login with their email address, which was one of the big 
usability problems with the previous version of OpenID (i.e. no one could 
remember their OpenID URI).

thx,

- Mike


---------------------------------------------------

Michael Schwartz
Gluu
Founder / CEO

On Fri, 10 Feb 2012, Olga Biasotti wrote:

> Hello Everyone,
>
> We are part of InCommon Shibboleth Federation. And we are looking into extending our authentication login options with OpenID Support?
>
> Questions:
> Does Shibboleth support OpenID logins currently?
> What changes are needed from SP to support OpenID logins
> If IdP supports OpenID, how do they communicate with SP (SAML, OpenID, both)?
> Shibboleth plans to support OpenID and the timeline
>
> I found some documentation for IdP and OpenID (extra libraries, plug-ins), etc. But nothing related to SPs? ANy feedback would be of great use!  Thank you!
>
> Sincerely,
>
> Olga Biasotti
>
> 650-736-1548
> HighWire Press
> Stanford University
> 1454 Page Mill Road
> Palo Alto CA 94304
>
>
>
>
>
>