Advise

[Vilus, Luckson]

Hi,

My name is Luckson Vilus, a software architect for La Capitale. I am very new in Shibooleth but we plan to adopt these products for securing our resouces. We have two main areas : everything with public facing (our portails, public web site, web services that serve those purposes) and internal area for everything internal. Sometime, some portails need to consume services deployed in the internal zone. Then, for the architecture of our security plateform, we design it like this :

·         One IdP and its SP for the external zone. The IdP will use OpenLDAP as its Identity store (external users and their profiles)

·         An other IdP and its SPs for securing the internal area. The Identity store for the internal zone is defferent and contains only internal users and their profiles.

·         To let the portails in the external zone consume services in the internal zone, we think establish a trust bethween the IdPs.

Do you think this the right way to go? Have you some advise to give us in that issue?

Thank and sorry the quality of my english.


Luckson Vilus, Msc. Informatique système
Conseiller en architecture de système / Software architecture advisor
Direction de l'architecture des systèmes / IT Architecture
418 747-7385
Téléc. : 418 644-0530
Luckson.Vilus at lacapitale.com<mailto:Luckson.Vilus at lacapitale.com>

[cid:image001.gif at 01D036E8.47C156F0]
La Capitale assureur de l'administration publique inc. / La Capitale Civil Service Insurer Inc.
625, rue Saint-Amable, Québec (Québec)  G1R 2G5

www.lacapitale.com<http://www.lacapitale.com/>


________________________________
AVIS: Ce courriel privilégié et confidentiel est destiné à la seule personne ou entité à laquelle il est adressé. Pour toute autre personne, toute action prise en rapport à ce courriel ainsi que toute lecture, reproduction, transmission et/ou divulgation d'une partie ou de l'ensemble de celui-ci est interdite. Si vous n'êtes pas la personne autorisée à recevoir ce courriel, S.V.P. le retourner à l'expéditeur et le détruire. Bien que ce courriel ait été traité contre les virus, il est de la responsabilité du destinataire de s'assurer que l'envoi en est exempt. Nos communications avec vous peuvent contenir des renseignements confidentiels ou protégés par le secret professionnel. Si vous désirez que nous communiquions avec vous par un autre moyen de transmission que le courrier électronique ordinaire non sécurisé, veuillez nous en aviser.

NOTICE: This privileged and confidential email is intended only for the individual or entity to whom it is addressed. With regard to all others, any action related with this email as well as any reading, reproduction, transmission and/or dissemination in whole or in part of the information included in this email is prohibited. If you are not the addressee, immediately return the email to sender prior to destroying all copies. Even if this email is believed to be free from any virus, it is the responsibility of the recipient to make sure that it is virus exempt. Our communications to you may contain confidential information or information protected under solicitor-client privilege. Please advise if you wish us to use a mode of communication other than regular, unsecured e-mail in our communications with you.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20150123/cecdf56b/attachment-0001.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.gif
Type: image/gif
Size: 3447 bytes
Desc: image001.gif
Url : http://shibboleth.net/pipermail/users/attachments/20150123/cecdf56b/attachment-0001.gif