Is Shibboleth interoperable with Adobe Pass?

Peter Schober peter.schober at univie.ac.at
Wed Dec 14 20:22:33 GMT 2011


* Cantor, Scott <cantor.2 at osu.edu> [2011-12-14 21:15]:
> I would add that for the most part SSP is pretty compliant. There are edge
> cases where we have more flexibility, and other things (unlikely to matter
> here) like logout where it is.
> 
> If we had an idea what the interop issue you ran into was, we'd have more
> chance of predicting your success. But then I imagine if you knew that,
> you'd have gotten it to work.

There where a few posts from Jason to the SimpleSAMLphp lists, I
recall something about Artifacts (SSP does not support back-channels)
and DSA keys (which are not supported by xmlseclibs as used by SSP).
Also there was talk of PKIX-style trust models (key names).

So it wasn't so much about compliance, I think, but total features and
technologies (in the most general sense, not limited to profiles and
bindings) supported.

Not that I'm saying that using Shib with this Adobe thing is
guaranteed to work (or that it won't with SSP).
-peter


More information about the users mailing list