OIDC plugin for Shibboleth v2

[Paul Hethmon]

I’ve finally got around to setting up open source access to the OIDC profile handler I’ve built for Shibboleth v2. While I know that is of limited usefulness (with the imminent demise of v2 support), I’m still making it available. Our plans here at Clareity are to move to a Shibboleth v3 base over the next few months and update the OIDC profile handler for that.

It’s definitely a version 1.0 level piece of code though its passed all of the certification tests except for dynamic client registration (there is no support for dynamic client registration). Feel free to download and give it a try. I do need to put in some documentation for it as its a full Shib profile handler and there are changes to make for it to work. I’ll be doing that this afternoon.

Also, it requires you to run our database backed storage service. While I think its theoretically possible to do it with cookies and avoid the database, I don’t think its any simpler. Plus for me, it gets persistence across a cluster and restarts, easily.

Source code:

 DB Storage Service (1.3.0 required) — https://bitbucket.org/clareity/db-storage-service

 OIDC Handler — https://bitbucket.org/clareity/openid-handler-v2

cheers,

Paul

-----
Paul Hethmon
Chief Software Architect
paul.hethmon at clareitysecurity.com<mailto:paul.hethmon at clareitysecurity.com>


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160624/b023334a/attachment.html>