How to integrate SAML2

[Cantor, Scott]

On 2/4/14, 12:07 PM, "Alex Hitchins" <alex at alexhitchins.com> wrote:

>I am currently looking to implement a SAML2 authentication mechanism to
>an existing open source platform. I¹m completely new to SAML2 and
>currently at a dead end. Is there an existing module/API I can use to
>perform the SAML authentication?

Shibboleth is an implementation for Apache, IIS, and FastCGI that is
designed to support SAML via web server middleware. It offers no API in
the normal sense, deliberately, except for a few advanced cases.

OpenSAML is not a plug and play library for SAML, it's a low level toolkit
for experts that are implementing SAML and related functionality, mainly
us, but it is not advisable for an application developer or platform
developer to try and support SAML with it. Developers in that space lack
the skill set to do that safely and should use an existing implementation,
or an alternative component library that's much higher level than ours.

-- Scott