servicenow SAML 2 integration

Peter Schober peter.schober at
Thu May 8 12:18:57 EDT 2014

* Cantor, Scott <cantor.2 at> [2014-05-08 17:04]:
> Coincidentally, I was recently discussing internally whether to
> invest any cycles in updating the saml2int profile, which you
> probably recall was intended to help with that problem. It would be
> useful to me to know if people are using that for this kind of
> purpose. If not, it's not a good use of the project's time to bother
> with it.

We did reference saml2int with a few of vendors (a handful at most),
and maybe Univie is still doing that, but I'm not involved with that
anymore.  It worked OK but I guess that's always related to how the
deployment goes and whether it actually comes to fingerpointing etc.

To Michael's comment: I don't expect anyone to understand saml2int up
front (though it's rather simple to follow), same as probably noone
will know what's entailed when you say "Shibboleth IDP compatible",
which will even include some things the software can be made to
do/support, but we don't want.
So I see that not so much as documentation or educational material for
the vendor, but to avoid exactly the kind of 'pissing contest over
what "SAML" means' you mentioned.

More information about the users mailing list