<html><body><div style="color:#000; background-color:#fff; font-family:arial, helvetica, sans-serif;font-size:12pt"><div style="font-family: arial, helvetica, sans-serif; font-size: 12pt; "><span>FYI, we integrate to Google via SAML (ADFS Idp on our side) but Google has recently told us that they are moving off of SAML and on to openID. They stated this to us when they asked to integrate to our products:</span></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: arial, helvetica, sans-serif; background-color: transparent; font-style: normal; "><span><br></span></div><div style="font-family: arial, helvetica, sans-serif; ">"<span style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px;
-webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255); display: inline !important; float: none; ">we no longer support SAML for authentication on vendor websites. For security purposes we ask our vendors to support Single-Sign-On (SSO) using </span><span class="il" style="background-color: rgb(255, 255, 204); color: rgb(34, 34, 34); font-family: arial, sans-serif; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; ">OpenID</span><span style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: start; text-indent: 0px;
text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255); display: inline !important; float: none; "> for authentication"</span></div><div style="color: rgb(34, 34, 34); font-family: arial, sans-serif; background-color: rgb(255, 255, 255); font-style: normal; "><span style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255); display: inline !important; float: none; "><br></span></div><div style="color: rgb(34, 34, 34); font-family: arial, sans-serif; background-color: transparent; font-style: normal;
"><span style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255); display: inline !important; float: none; ">Not sure what the ramifications are on this going forward yet as that indicates that connecting to them as a consumer of their services still supports SAML but going the reverse, openID is what they want... Anyway, just a heads up.</span></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: arial, helvetica, sans-serif; background-color: transparent; font-style: normal; "><br></div> <div style="font-size: 12pt; font-family: arial, helvetica, sans-serif; "> <div style="font-size: 12pt;
font-family: 'times new roman', 'new york', times, serif; "> <div dir="ltr"> <font size="2" face="Arial"> <hr size="1"> <b><span style="font-weight:bold;">From:</span></b> Oleg Chaikovsky <oleg.chaikovsky@aegisusa.net><br> <b><span style="font-weight: bold;">To:</span></b> users@shibboleth.net <br> <b><span style="font-weight: bold;">Sent:</span></b> Tuesday, October 9, 2012 1:55 PM<br> <b><span style="font-weight: bold;">Subject:</span></b> Google ID as sort of the IDP?<br> </font> </div> <br>
I have seen the large amounts of information about connecting Google <br>Apps via Shib which is fairly straightforward at this point. Google Apps <br>as an SP.<br><br>So - now - if a group wanted to make their Google Apps domain to be the <br>primary identifier for all of their other apps - would that simply be <br>using external auth through the IdP? Simple as that? I keep thinking <br>there must be more to it but all info I have read on the Wiki points to <br>that model. (there are no additional attributes to consider in this idea).<br><br>-- <br>Oleg Chaikovsky<br><br>--<br>To unsubscribe from this list send an email to <a ymailto="mailto:users-unsubscribe@shibboleth.net" href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br><br><br> </div> </div> </div></body></html>