<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">Can certs for SSL be handled via the InCommon site admin tool? --Keith<div>___________<br><div><div>On Jun 20, 2012, at 06:53:48, Keith Hazelton wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">Appreciate the info, thanks Scott.<div><br></div><div>On the question of certs in SAML metadata for client authN over SSL, looking for guidance on how to do that. I see this page:</div><div><br></div><div><a href="https://spaces.internet2.edu/display/InCCollaborate/X.509+Certificates+in+Metadata">https://spaces.internet2.edu/display/InCCollaborate/X.509+Certificates+in+Metadata</a></div><div><br></div><div>and the reference linked from there: </div><div><br></div><div><a href="http://internet2.na6.acrobat.com/p46467886/" class="external-link" style="color: rgb(0, 109, 175); text-decoration: underline; outline: none; font-family: Arial, Helvetica, FreeSans, sans-serif; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: 17px; orphans: 2; text-align: left; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255); ">X.509 Certificates in the Federation Metadata</a><span style="color: rgb(51, 51, 51); font-family: Arial, Helvetica, FreeSans, sans-serif; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: 17px; orphans: 2; text-align: left; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255); display: inline !important; float: none; ">: A technical webinar presented by the </span><em style="color: rgb(51, 51, 51); font-family: Arial, Helvetica, FreeSans, sans-serif; font-size: 13px; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: 17px; orphans: 2; text-align: left; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255); ">InCommon Technical Advisory Committee</em><span style="color: rgb(51, 51, 51); font-family: Arial, Helvetica, FreeSans, sans-serif; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: 17px; orphans: 2; text-align: left; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255); display: inline !important; float: none; "> (October 22, 2009)</span></div><div><div style="text-align: left;"><font class="Apple-style-span" color="#333333" face="Arial, Helvetica, FreeSans, sans-serif"><span class="Apple-style-span" style="font-size: 13px; line-height: 17px;"><br></span></font></div><div style="text-align: left;"><font class="Apple-style-span" color="#333333" face="Arial, Helvetica, FreeSans, sans-serif"><span class="Apple-style-span" style="font-size: 13px; line-height: 17px;">Are these the right places to look for detailed how-to info? </span></font></div><div style="text-align: left;"><font class="Apple-style-span" color="#333333" face="Arial, Helvetica, FreeSans, sans-serif"><span class="Apple-style-span" style="font-size: 13px; line-height: 17px;"><br></span></font></div><div style="text-align: left;"><font class="Apple-style-span" color="#333333" face="Arial, Helvetica, FreeSans, sans-serif"><span class="Apple-style-span" style="font-size: 13px; line-height: 17px;"> --Keith</span></font></div><div style="text-align: left;"><font class="Apple-style-span" color="#333333" face="Arial, Helvetica, FreeSans, sans-serif"><span class="Apple-style-span" style="font-size: 13px; line-height: 17px;">____________________________</span></font></div><div><div>On Jun 19, 2012, at 21:37:06, Cantor, Scott wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><div>On 6/19/12 10:09 PM, "Keith Hazelton" <<a href="mailto:hazelton@wisc.edu">hazelton@wisc.edu</a>> wrote:<br><blockquote type="cite"><br></blockquote><blockquote type="cite">I am trying to determine if some Project Bamboo-specific entity metadata<br></blockquote><blockquote type="cite">could be folded into a SAML 2 metadata document by<br></blockquote><blockquote type="cite">specification-compliant extensions.<br></blockquote><br>This is more of a saml-dev question.<br><br>The rule of thumb is that if you need something to drive behavior between<br>two federated systems, it's worth putting in metadata, otherwise there<br>really isn't much reason to. Even contact information at this point is a<br>questionable value proposition.<br><br>There's nothing in any rule that says what you can or can't put into an<br>extension, there's nothing to restrict that.<br><br><blockquote type="cite">Additional elements might include<br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">- - An additional "ApplicationID" as an alias for the entityID<br></blockquote><br>I'm not sure what that's supposed to be, but it doesn't sound like a good<br>idea.<br><br><blockquote type="cite">- - A cert for use in client authN over SSL<br></blockquote><br>Unless you're talking about end users or something, that's already in<br>metadata.<br><br><blockquote type="cite">- - A Bamboo user identifier for the registered author of the<br></blockquote><blockquote type="cite">application/entity<br></blockquote><br>That strikes me as one of those questionable things. What purpose does it<br>serve? Documentation isn't really the point of metadata.<br><br>-- Scott<br><br>--<br>To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br></div></blockquote></div><br></div></div></blockquote></div><br></div></body></html>