shibboleth vs those "other" idps

John Dennis jdennis at
Thu May 14 17:44:53 EDT 2015

On 05/14/2015 05:02 PM, Cantor, Scott wrote:
> Aside from customizability, which is just not relevant to a shop like
> that, the main feature is also not one that has materialized all that
> well, and that's federation at scale. The campus to campus use cases
> just haven't emerged, and the cloud services are simply not
> federated, they're multi-tenanted, which is a totally different
> problem that tolerates a totally different solution.

OpenStack (open source software for creating private and public clouds)
is diligently working on federation and has made great progress.
Shibboleth IdP's have been used. We are also making use of ECP.

OpenStack federation is relatively new, parts of it are in place, others
are rapidly following. The bi-annual OpenStack Summit starts next week,
the following talks and info sessions are scheduled:

* Enabling real-world interoperable hybrid cloud use cases using
OpenStack's federated identity capabilities

* Federated Identity Demo Deep Dive

* Federation of OpenStack Clouds - Challenges and Benefits

* New Advances in Federated Identity and Federated Service Provider
Support of OpenStack Clouds


More information about the users mailing list