Google ID as sort of the IDP?

Glenn Wearen glenn.wearen at heanet.ie
Wed Oct 10 11:51:34 EDT 2012


You can use a jaas compliant imap authenticator but you'll need a data source for your resolver if you need any attribute other than principal

http://sourceforge.net/projects/jaas-rimap/ is in production at one IdP hat I'm aware of and seems quite reliable.

Regards
Glenn


Edugate Operations
HEAnet Limited, Ireland's Education and Research Network - 
1st Floor, 5 George's Dock, IFSC, Dublin 1
Registered in Ireland, no 275301  tel: +353-1-6609040  fax: +353-1-6603666

On 10 Oct 2012, at 15:05, Yannick Béot wrote:

> Hi, 
> Google cannot work as a SAML IdP per se, even though it supports SAML 2.0 as a service provider (from your IdP to Google Apps).
> 
> If you want to delegate the authentication to you Idp to Google Apps, you would have to implement OAUTH (https://developers.google.com/accounts/docs/AuthForWebApps) as an authentication provider for IdP. It's possible technically speaking I think.
> 
> Y.
> 
> 
> 
> On Tue, Oct 9, 2012 at 10:55 PM, Oleg Chaikovsky <oleg.chaikovsky at aegisusa.net> wrote:
> I have seen the large amounts of information about connecting Google
> Apps via Shib which is fairly straightforward at this point. Google Apps
> as an SP.
> 
> So - now - if a group wanted to make their Google Apps domain to be the
> primary identifier for all of their other apps - would that simply be
> using external auth through the IdP? Simple as that? I keep thinking
> there must be more to it but all info I have read on the Wiki points to
> that model. (there are no additional attributes to consider in this idea).
> 
> --
> Oleg Chaikovsky
> 
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
> 
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20121010/7f65c997/attachment.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 2330 bytes
Desc: not available
Url : http://shibboleth.net/pipermail/users/attachments/20121010/7f65c997/attachment.bin 


More information about the users mailing list