simpleSSO

[Klingenstein, Nate]

simpleSSO uses certificates to say "who", leaving it hard to change your "who" and easy to change anything else.

And an interesting, next-gen twist would be to optionally use blockchain-derived "who" tokens in place of certificates while leaving the "what" part unchanged.  Since just plain "who" is pretty static data, and rules could be written for it, and the number of providers in any given galaxy isn't THAT large, it might be workable and interesting.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20161222/91cbc147/attachment.html>