WS-Fed and WS-Trust support

[Cantor, Scott]

On 7/21/13 10:42 PM, "adam_j_bradley" <adam_j_bradley at yahoo.com> wrote:

>I'm currently investigating the feasibility of adding WS-Fed and WS-Trust
>support to Shibboleth and was wondering if there is any guidance, or guide
>on how to write custom add-ins.

Since you indicated you mean the IdP, only what's in the wiki and the code
itself. And there's Spring, which you have to know a little to do anything.

Most/all of the WS-Trust object provider code is already there, don't know
about WS-Fed specifically, though it's mostly syntactically WS-Trust. You
would have to build profile handlers to implement extensions that do
anything useful. There is no elegant way to do that, it's just a giant
hole in a servlet that you plug into and do whatever you want. You could
conceivably ignore the entire rest of the API in doing that, or reuse bits
and pieces, but you would have to read the code to do that.

I had the impression Georgetown might have built an STS on top of this
code base, but Brent would know.

-- Scott