Multi-Context Broker (MCB) Functionality for Shibboleth IdP version 3.x

[David Walker]

The Multi-Context Broker (MCB) working group has released a set of
documents to help Shibboleth deployers to support multifactor
authentication and assurance profiles in IdP version 3.x.  These include
a description of the Multi-Context Broker Model for orchestrating among
multiple authentication methods and authentication contexts, as well as
recipes for implementing the Model in IdP version 3.x.  The documents
are available at https://wiki.shibboleth.net/confluence/x/jwBSAQ.

_Background_

The Multi-Context Broker plugin for Shibboleth IdP version 2.x was a
great success by providing an implementation platform for early adopters
of multifactor authentication and the InCommon Assurance Program, about
a year ahead of the release of Shibboleth IdP version 3.x.  Even more
important:

  * It has raised the awareness of its capabilities throughout the
    community, putting those capabilities into the planning horizon of
    many universities and service providers ranging from CILogon to WorkDay.
  * It has educated the implementation of these capabilities in
    Shibboleth v3.

As we knew at the start, however, the MCB would not be directly
transferable to Shibboleth v3.  The functionality is native in IdP
version 3, albeit requiring different configuration, so we have chosen
not to recreate the MCB code for IdP version 3, choosing instead to
document the new configuration.

David Walker
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160105/b1844737/attachment-0001.html>