Guidance for app owners: got any? (i.e. "things to think about" before you develop/deploy)

[Cantor, Scott]

On 9/20/13 2:42 PM, "Erdos, Marlena" <marlena_erdos at harvard.edu> wrote:
>
>I could do a write up on my own but I figure that this wheel has been
>invented (and written about) repeatedly already :-).

In my own experience, many attempts have been made, some progress made,
and mostly no cycles available to actually do the work because it amounts
to writing a book.

My first attempt was to start a WG within MACE regarding federated
application development, and I didn't have the time. My second attempt was
to draft a number of wiki topics on federated application issues which are
in the InCommon documentation and were left in varying states, some
polished up by InCommon.

My latest attempt is part of a CIC group working on a cookbook on cloud
application deployment targeted at both IDP and SP operators, but it's in
a nascent state.

While there are issues that obviously are specific to non-federated
situations, in practice most guidance tends to apply to SSO in general and
(IMHO) one gets better generality and resilience by designing for
federation even in its absence.

Another problem though is lack of consensus on many issues. When you don't
have broad agreement (or don't know you have it), it's difficult to tell
people what to do.

-- Scott