GEANT OIDC plugin

[Jim Fox]

>>> It's a bit involved, partly because it requires shib vers 3.4, which I didn't have. So I had to install a 3.4 idp.
>>> They also use jetty, which we don't.  So I had to install jetty.
>
> Our last release from June tagged as v0.7.0a is based on 3.3 IdP, it is only the head that requires 3.4. About the ansible, we are using now ansible for installation but that is mainly for development purposes. The target is to have something much simpler in the next release that is based on 3.4. Something you can unpack over existing installation.

I expect your bigger problem is the system file modifications.  You may end up including most of your extension in the standard 3.4 deployment -- in some sort of un-activated state.  I that case all one would need to do is configure it.

>
>>> As far as I can tell it only supports implicit flow.  At least that's all my instance supports.
>
> All response types are supported. Having only implicit flow may be result of misconfiguration or missing something in the installation like token and userinfo endpoints.
>

I expected as much.  My openid-configuration has

    "grant_types_supported":[
       "authorization_code",
       "implicit",
       "refresh_token"
    ],

But I didn't see how to configure the replying party for that.  Nor how to configure replying party credentials.  Maybe you could point me to some documentation for those.

Thanks,

Jim