IdP support for Open Auth?
David Langenberg
davel at uchicago.edu
Wed Sep 21 22:05:43 EDT 2016
The OIDC add-on that we had written for Shib also provides OAuth2.0 support.
Dave
David Langenberg
Asst. Director, Identity Management
The University of Chicago
Sent from my iPhone
On Sep 21, 2016, at 7:40 PM, Klingenstein, Nate <nklingenstein at calstate.edu<mailto:nklingenstein at calstate.edu>> wrote:
A vendor's response to inquiry about SSO via SAML 2 is:
"____ can integrate SAML through Open auth 2.0 if the service supports it."
Is that an arty "no" or does that offer the possibility of relying on Shibb IdP for authN?
I think they meant OAuth 2.0, which is a sign.
Anyway, there's a binding for SAML tokens to OAuth 2.0 that went through the IETF. The IdP itself can't field OAuth requests as far as I know.
It would be pretty trivial to write a shim that could cache assertions sent by the IdP and expose those via OAuth.
--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net<mailto:users-unsubscribe at shibboleth.net>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160922/8bf2743a/attachment.html>
More information about the users
mailing list