MPASSid-proxy OAuth (Facebook) and OIDC (Google) IdP AuthN Integration

[Henri Mikkonen]

Hi Phil,

Thank you for very good analysis!

As you've probably noticed, even though the authors of the MPASSid code 
are the same with the GEANT OIDC -plugin (i.e. me and Janne), the 
approach is very much different. In the MPASSid case, we got funding 
from the Finnish Ministry of Education and Culture to develop an SSO 
solution with open source software. We chose to use Shibboleth as basis, 
but the main goal has clearly been the Finnish MPASSid proxy instance 
itself, instead of "a generic product". That explains for instance the 
attribute resolution parts being incompatible with SSO sessions: we only 
need one principal from social user module in the MPASSid use cases.

Anyway, in the future people should take the MPASSid modules from this 
GitHub organization: https://github.com/mpassid

It contains the same modules in their own repositories that use to exist 
under one big repository in the Digipalvelutehdas organization (which 
was mentioned in Phil's document). There are some package naming changes 
as the names were harmonized between the modules.

BR,
Henri.

On 22/11/2018 15.10, Philip Smart wrote:
> Hi All,
> 
> I have been trying out the MPASSid-proxy social user authentication extensions for the IdP.
> 
> Rather than adding the libraries to an already deployed IdP, I added the source as a dependency of the idp-parent. The idea being
> to understand what it would mean to add the extension as a native IdP AuthN implementation.
> 
> It all looks pretty feasible, I have attached my workings. If anybody wants to take a look
> and or has any comments, great. Janne and or Henri will now quite a bit about it already! but any comments welcome.
> 
> Phil
> 
> Jisc is a registered charity (number 1149740) and a company limited by guarantee which is registered in England under Company No. 5747339, VAT No. GB 197 0632 86. Jisc’s registered office is: One Castlepark, Tower Hill, Bristol, BS2 0JA. T 0203 697 5800.
> 
> Jisc Services Limited is a wholly owned Jisc subsidiary and a company limited by guarantee which is registered in England under company number 2881024, VAT number GB 197 0632 86. The registered office is: One Castle Park, Tower Hill, Bristol BS2 0JA. T 0203 697 5800.
> 
> 
>