is OpenID Connect on the roadmap?

[Nicole Harris]

Hi All

I think it's probably best to take all of this back to facts and planning possibilities. 

As various people have pointed out, OpenID Connect isn't at a stable point at which integration would be possible yet but there are obviously lots of organisations with an interest in making that happen (though hopefully not refeds Leif as our list is already way too long!)

As Scott mentioned, in order to be able to consider implementing this type of approach we need to get the IdP significantly reconfigured. That's what the work for IdPv3 is all about. When we get there these sort of things will be much easier to plan. I think the devs have made the right choice moving the IdP towards this goal, reflecting the changing environment we are all in. 

Rod's point is that regrettably it is very difficult to speed up delivery of something as complex as IdPv3 with more resource so we have a pretty static timeframe on that. 

So to answer Tom's original question, I think the right time for us to look at whether there is scope for this type of integration will be around Q1 2014 as we move towards the v3 release and have a platform where this is possible. 

In the meantime of course it makes sense to talk to the various organisations people like Mike and Leif have mentioned over the next year or so, as we do anyway across the project.  As Mike mentioned we had a good chat at RSA around some of these ideas.

So yes there is an outlet for project planning, we are listening but regrettably it's not going to be an easy one to deliver on right now. 

The full project plan for the next 6 quarters goes to the Board tomorrow. It's not been easy to get right but a lot of work has gone in and I think it offers the right path forward so hopefully we will have agreement on it very soon. 

Wish us luck! 

Nicole



On 1 Nov 2012, at 15:35, Tom Scavo <trscavo at gmail.com> wrote:

> On Thu, Nov 1, 2012 at 8:48 AM, Rod Widdowson <rdw at steadingsoftware.com> wrote:
>> Sort of relevant:
>> 
>> http://www.joelonsoftware.com/articles/fog0000000069.html
>> 
>> "It didn't work well last time, so we'll start again from the ground up and this time it's bound to take off".
>> 
>> Even if it isn't relevant to the topic
> 
> It's not. At least it's not what I had in mind when I started this thread.
> 
>> it has to be relevant to any mailing list with "dev" in the title.
> 
> Well that's the problem, isn't it? There has never been an outlet for
> these types of project planning issues, at least an outlet not overly
> tainted by the strict dev viewpoint.
> 
> Don't get me wrong, I've developed and/or managed my share of software
> projects (although none as large as shib), so I keenly understand the
> difficulty in that, but when a project planning question degenerates
> so quickly into implementation issues, there's something wrong IMO.
> 
> Yes, I hear what Scott is saying about the project (I've been
> listening all along) but is the current state of affairs cause or
> effect? Probably both, but I hope you get my point.
> 
> Tom
> --
> To unsubscribe from this list send an email to dev-unsubscribe at shibboleth.net