Google ID as sort of the IDP?

[Yannick Béot]

Every account should have IMAP access enable but that's a nice idea!

------------------------------
De : Glenn Wearen
Envoyé : 10/10/2012 17:51
À : Shib Users
Objet : Re: Google ID as sort of the IDP?

You can use a jaas compliant imap authenticator but you'll need a data
source for your resolver if you need any attribute other than principal

http://sourceforge.net/projects/jaas-rimap/ is in production at one IdP hat
I'm aware of and seems quite reliable.

Regards
Glenn


Edugate <http://www.edugate.ie> Operations
HEAnet Limited <http://www.heanet.ie>, Ireland's Education and Research
Network -
1st Floor, 5 George's Dock, IFSC, Dublin 1
Registered in Ireland, no 275301  tel: +353-1-6609040  fax: +353-1-6603666

On 10 Oct 2012, at 15:05, Yannick Béot wrote:

Hi,
Google cannot work as a SAML IdP per se, even though it supports SAML 2.0
as a service provider (from your IdP to Google Apps).

If you want to delegate the authentication to you Idp to Google Apps, you
would have to implement OAUTH (
https://developers.google.com/accounts/docs/AuthForWebApps) as an
authentication provider for IdP. It's possible technically speaking I think.

Y.



On Tue, Oct 9, 2012 at 10:55 PM, Oleg Chaikovsky <
oleg.chaikovsky at aegisusa.net> wrote:

> I have seen the large amounts of information about connecting Google
> Apps via Shib which is fairly straightforward at this point. Google Apps
> as an SP.
>
> So - now - if a group wanted to make their Google Apps domain to be the
> primary identifier for all of their other apps - would that simply be
> using external auth through the IdP? Simple as that? I keep thinking
> there must be more to it but all info I have read on the Wiki points to
> that model. (there are no additional attributes to consider in this idea).
>
> --
> Oleg Chaikovsky
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>

--
To unsubscribe from this list send an email to
users-unsubscribe at shibboleth.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20121010/3e1dcc36/attachment.html