OpenSAML 3.x documentation?
Peter Schober
peter.schober at univie.ac.at
Tue Jun 21 14:52:49 EDT 2016
* Steve Sobol - Lobos Studios <steve at LobosStudios.com> [2016-06-21 18:30]:
> Can you recommend an implementation I can use on the client side? I'm using
> Gluu (which implements Shibboleth) on the server side.
If that means you're using the Gluu-packaged Shibboleth Identity
Provider software and are looking for an implementation of a SAML
Service Provider to protect a given resource/application:
The Shibboleth project also offers a very capable SAML SP
implementation, intended to be used as web server module for Apache
httpd or MS-IIS (or Nginx/Lightty FastCGI authorizer).
It does not provide an API and so can be used with any server-based
framework or programming language, also isolating you from API-level
changes of those frameworks/languages.
There are other SAML SP implementations out there, of course.
E.g. SimpleSAMLphp assumes a PHP-capable web environment and therefore
may work better in certain constrained deployments (where no system
software can be installed, the web server configuration cannot be
changed, etc.). It provides a PHP API for integration, so for non-PHP
resources you'd need workarounds that destory that capability (of
running it as unpriviledged user in any PHP web hosting environment.)
-peter
More information about the users
mailing list