servicenow SAML 2 integration
Michael R. Gettes
gettes at cmu.edu
Thu May 8 11:39:34 EDT 2014
FWIW, I do not use saml2int… i find the people (vendors) i deal with tend
not to understand stuff. (i’m trying to be nice here). the servicenow guys
were certainly an exception - they had significant clue on real security issues
as well as UI and all sorts of stuff. I enjoyed my interactions with them. And,
those of you who know me, i’m a prick when it comes to vendors (no further comment
please, I know i tee’d one up for many of you). If I ever need to really hit someone
over the head with standards and tech stuff, I’m gonna bring in other schools
and other experts cause just pointing to a document tends not to work these days…
again, this is my opinion and my experience on how I solve problems with vendors.
I find this to be a rather sad state of affairs.
I can certainly imagine others being more successful than I employing tools like
saml2int.
/mrg
On May 8, 2014, at 11:04 AM, Cantor, Scott <cantor.2 at osu.edu> wrote:
> On 5/8/14, 10:16 AM, "Michael R. Gettes" <gettes at cmu.edu> wrote:
>>
>> as a couple of folks have askedŠ here is the contract language we use.
>> When the company refuses to do InCommon we come up something custom but
>> along similar lines. From my experience I have decided to NOT promote
>> SAML in contract and to specify shibboleth compatibility because I have
>> had too many cases of a vendor saying ³we do SAML² and then it becomes a
>> pissing contest on what means SAML so I decided to pursue the product
>> compatibility path and I have had much greater success with this path.
>
> Coincidentally, I was recently discussing internally whether to invest any
> cycles in updating the saml2int profile, which you probably recall was
> intended to help with that problem. It would be useful to me to know if
> people are using that for this kind of purpose. If not, it's not a good
> use of the project's time to bother with it.
>
> -- Scott
>
>
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
More information about the users
mailing list