Holder of Key and Sender Vouches subject confirmation

Peter Schober peter.schober at univie.ac.at
Fri Mar 28 04:45:04 EDT 2014


* Tom Scavo <trscavo at gmail.com> [2014-03-27 21:24]:
> That code hasn't been touched for a very long time. It was
> contributed by a (very capable) Google Summer of Code student many
> moons ago.

If someone is still using this, please update the wiki (version, link).

> Doesn't simpleSAMLphp do HoK Web Browser SSO out of the box?

Using Apache httpd:
https://simplesamlphp.org/docs/stable/simplesamlphp-hok-idp
So what certs (or CAs) are acceptable is probably left to httpd
directives. How to map subjects also seems to be left to the
deployer? Not sure you can make HoK optional and also allow username
and password logins, from those docs.
-peter


More information about the users mailing list