GEANT OIDC plugin

[Jim Fox]

I had some time and installed the latest geant oidc plugin (https://github.com/CSCfi/shibboleth-idp-oidc-extension) 
on one of our test idps, using our kerberos authn and our real attribute resolvers.

It's a bit involved, partly because it requires shib vers 3.4, which I didn't have. So I had to install a 3.4 idp.
They also use jetty, which we don't.  So I had to install jetty.

However, after all that, it wasn't overly difficult.  They install with ansible, and one of their 
scripts mostly installed the extension on our test system.   After that there's a few additions to 
the relying-party, attribute-resolver and attribute filter configs.

As far as I can tell it only supports implicit flow.  At least that's all my instance supports.

I'd like to send them some comments on my experience.  Does any know a mailing list they work with?

Thanks,

Jim