IdP support for Open Auth?

David Langenberg davel at uchicago.edu
Wed Sep 21 22:05:43 EDT 2016


The OIDC add-on that we had written for Shib also provides OAuth2.0 support.

Dave

David Langenberg
Asst. Director, Identity Management
The University of Chicago
Sent from my iPhone

On Sep 21, 2016, at 7:40 PM, Klingenstein, Nate <nklingenstein at calstate.edu<mailto:nklingenstein at calstate.edu>> wrote:

A vendor's response to inquiry about SSO via SAML 2 is:
"____ can integrate SAML through Open auth 2.0 if the service supports it."

Is that an arty "no" or does that offer the possibility of relying on Shibb IdP for authN?

I think they meant OAuth 2.0, which is a sign.

Anyway, there's a binding for SAML tokens to OAuth 2.0 that went through the IETF.  The IdP itself can't field OAuth requests as far as I know.

It would be pretty trivial to write a shim that could cache assertions sent by the IdP and expose those via OAuth.
--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net<mailto:users-unsubscribe at shibboleth.net>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160922/8bf2743a/attachment.html>


More information about the users mailing list