OpenSAML 3.x documentation?

Peter Schober peter.schober at univie.ac.at
Tue Jun 21 14:52:49 EDT 2016


* Steve Sobol - Lobos Studios <steve at LobosStudios.com> [2016-06-21 18:30]:
> Can you recommend an implementation I can use on the client side? I'm using
> Gluu (which implements Shibboleth) on the server side.

If that means you're using the Gluu-packaged Shibboleth Identity
Provider software and are looking for an implementation of a SAML
Service Provider to protect a given resource/application:

The Shibboleth project also offers a very capable SAML SP
implementation, intended to be used as web server module for Apache
httpd or MS-IIS (or Nginx/Lightty FastCGI authorizer).
It does not provide an API and so can be used with any server-based
framework or programming language, also isolating you from API-level
changes of those frameworks/languages.

There are other SAML SP implementations out there, of course.
E.g. SimpleSAMLphp assumes a PHP-capable web environment and therefore
may work better in certain constrained deployments (where no system
software can be installed, the web server configuration cannot be
changed, etc.).  It provides a PHP API for integration, so for non-PHP
resources you'd need workarounds that destory that capability (of
running it as unpriviledged user in any PHP web hosting environment.)
-peter


More information about the users mailing list