ECP delegation

[Steven Carmody]

On 7/2/12 10:23 AM, Cantor, Scott wrote:
> On 7/2/12 4:17 AM, "Eddie Harari"<eddie.harari at gmail.com>  wrote:
>
>>
>>   I was able to activate the ECP profile and to test it using the demo
>> script.
>>   I am reading the ECP profile documents but I cant find any place
>> that  specifies the authentication delegation process.
>
> The wiki pages we created for the portal project have detailed technical
> descriptions and have pages containing the set of steps involved in
> configuring all the pieces.
>
> https://spaces.internet2.edu/x/n4Sg
>

The original implementation of the Shibboleth Delegation model included 
an extension to the Shibboleth IDP, additional support in the Shibboleth 
SP, and some java code implemented for uportal that could run in the 
middle tier. The entire solution is described here:

https://spaces.internet2.edu/display/ShibuPortal/Solution+Proposal

Over lunches during May I developed  PROTOTYPE implementation of the 
mid-tier in PHP. It works -- but as many people know I'm not a 
programmer -- this should be considered just a prototype. Someone who 
actually knows PHP best practices should review it before anyone tries 
using it in production.

I'm in the process of documenting it, and packaging it up, and will add 
it to the Contributions page in the wiki. If you'd like to see the 
current version, drop me a line.