<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div class="">Have you tried pointing the vendor to</div>
<div class=""><br class="">
</div>
<a href="http://shibboleth.net/community/consultants.html" class="">http://shibboleth.net/community/consultants.html</a>
<div class=""><br class="">
</div>
<div class="">There's many commercial entities out there who would be more than happy to sell your vendor a SLA'd support contract.</div>
<div class=""><br class="">
</div>
<div class="">Dave</div>
<div class=""><br class="">
<div>
<blockquote type="cite" class="">
<div class="">On Jan 6, 2016, at 3:19 PM, Eric Goodman <<a href="mailto:Eric.Goodman@ucop.edu" class="">Eric.Goodman@ucop.edu</a>> wrote:</div>
<br class="Apple-interchange-newline">
<div class="">
<div class="WordSection1" style="page: WordSection1; font-family: Helvetica; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;">
<div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class="">
<span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);" class="">Way behind on this list.<o:p class=""></o:p></span></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class="">
<span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);" class=""><o:p class=""> </o:p></span></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class="">
<span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);" class="">I’ll throw in a related issue I’ve talked about with a few people (including Tom) on the FIWG about:<o:p class=""></o:p></span></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class="">
<span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);" class=""><o:p class=""> </o:p></span></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class="">
<span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);" class="">I have a vendor that installed the Shib SP to support SAML federation for a UC app. That vendor has stated that going forward they think it is too hard to support
Shib, and is developing their own SP solution.<span class="Apple-converted-space"> </span><o:p class=""></o:p></span></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class="">
<span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);" class=""><o:p class=""> </o:p></span></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class="">
<span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);" class="">My sense is that the vendor has a mix of concern about (a) complexity of install and maintenance and (b) relying on an external entity to provide what they see
as a core application capability. I’ve tried to make the argument that this is short sided and gave a number of examples (including some of the FIWG discussion and referencing saml2int, and comparing it to developing a local implementation of openssl) but
don’t think I’m having much sway (and I don’t have much contractual leverage either).<o:p class=""></o:p></span></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class="">
<span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);" class=""><o:p class=""> </o:p></span></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class="">
<span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);" class="">In any case, I mention it here because I don’t know if there are any other vendors that have raised the concern about how much they can rely on the Shib SP for
commercial support. This may be something valuable to consider in the Shib consortium or in the TIER packaging workgroups; a focus to help lower the bar (technical and otherwise) for vendors (and not just higher ed institutions) to select Shib (or other full
featured SAML SP solutions) rather than custom developed ones.<span class="Apple-converted-space"> </span><o:p class=""></o:p></span></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class="">
<span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);" class=""><o:p class=""> </o:p></span></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class="">
<span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);" class="">--- Eric<o:p class=""></o:p></span></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class="">
<span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);" class=""><o:p class=""> </o:p></span></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class="">
<b class=""><span style="font-size: 10pt; font-family: Tahoma, sans-serif;" class="">From:</span></b><span style="font-size: 10pt; font-family: Tahoma, sans-serif;" class=""><span class="Apple-converted-space"> </span>users [<a href="mailto:users-bounces@shibboleth.net" style="color: purple; text-decoration: underline;" class="">mailto:users-bounces@shibboleth.net</a>]<span class="Apple-converted-space"> </span><b class="">On
Behalf Of<span class="Apple-converted-space"> </span></b>IAM David Bantz<br class="">
<b class="">Sent:</b><span class="Apple-converted-space"> </span>Friday, December 18, 2015 4:50 PM<br class="">
<b class="">To:</b><span class="Apple-converted-space"> </span>Shib Users<br class="">
<b class="">Subject:</b><span class="Apple-converted-space"> </span>Re: SSO comparison request from executive management<o:p class=""></o:p></span></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class="">
<o:p class=""> </o:p></div>
<div class="">
<div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class="">
Thanks Tom. I will include a reference to the software recommendation (just Shibb and SimpleSAMLphp).<o:p class=""></o:p></div>
<div class="">
<div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class="">
<o:p class=""> </o:p></div>
</div>
<div class="">
<div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class="">
David<o:p class=""></o:p></div>
</div>
</div>
<div class="">
<div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class="">
<o:p class=""> </o:p></div>
<div class="">
<div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class="">
On Fri, Dec 18, 2015 at 3:20 PM, Tom Scavo <<a href="mailto:trscavo@gmail.com" target="_blank" style="color: purple; text-decoration: underline;" class="">trscavo@gmail.com</a>> wrote:<o:p class=""></o:p></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class="">
On Fri, Dec 18, 2015 at 6:24 PM, IAM David Bantz <<a href="mailto:dabantz@alaska.edu" style="color: purple; text-decoration: underline;" class="">dabantz@alaska.edu</a>> wrote:<br class="">
> As I feared, vendor messages maligning Shibboleth as an outdated solution<br class="">
> that is a nightmare to manage have triggered the following request from my<br class="">
> executive management:<br class="">
><br class="">
>> David,<br class="">
>> I continue to get messages (primarily from Ping) about options to Shib.<br class="">
>> Do you have time to do a quick comparison (functionality and cost) of Shib,<br class="">
>> Ping and other vendors that should be on our radar for UA?<br class="">
><br class="">
> I've replied briefly indicating why I regard the statements about Shibboleth<br class="">
> as false, but I'm pleading again for a strong well-grounded response to this<br class="">
> request.<br class="">
<br class="">
The InCommon Federation Interoperability Working Group [1] chaired by<br class="">
Walter Hoehn from the University of Memphis, is in the final stages of<br class="">
preparing a SAML V2.0 Implementation Profile for Federation<br class="">
Interoperability (linked on the WG home page). I imagine you could use<br class="">
this document to compare the functionality of Shibboleth and<br class="">
PingFederate, but total cost of ownership is another matter, I'm not<br class="">
sure how to measure that in each case.<br class="">
<br class="">
There is also the SAML Software Guidelines [2] published by InCommon.<br class="">
In order for PingFederate (or any implementation) to be mentioned on<br class="">
that page, it would have to correctly consume InCommon metadata. Apart<br class="">
from the implementations already mentioned on that page, I don't know<br class="">
of any software that does that.<br class="">
<br class="">
Hope this helps,<br class="">
<br class="">
Tom<br class="">
<br class="">
[1]<span class="Apple-converted-space"> </span><a href="https://spaces.internet2.edu/x/ioRRBQ" target="_blank" style="color: purple; text-decoration: underline;" class="">https://spaces.internet2.edu/x/ioRRBQ</a><br class="">
[2]<span class="Apple-converted-space"> </span><a href="https://spaces.internet2.edu/x/R4HPAg" target="_blank" style="color: purple; text-decoration: underline;" class="">https://spaces.internet2.edu/x/R4HPAg</a><br class="">
<span class="hoenzb"><span style="color: rgb(136, 136, 136);" class="">--</span></span><span style="color: rgb(136, 136, 136);" class=""><br class="">
<span class="hoenzb">To unsubscribe from this list send an email to<span class="Apple-converted-space"> </span><a href="mailto:users-unsubscribe@shibboleth.net" style="color: purple; text-decoration: underline;" class="">users-unsubscribe@shibboleth.net</a></span></span><o:p class=""></o:p></div>
</div>
<div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class="">
<o:p class=""> </o:p></div>
</div>
</div>
<span style="font-family: Helvetica; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">--<span class="Apple-converted-space"> </span></span><br style="font-family: Helvetica; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">
<span style="font-family: Helvetica; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">To
unsubscribe from this list send an email to<span class="Apple-converted-space"> </span></span><a href="mailto:users-unsubscribe@shibboleth.net" style="color: purple; text-decoration: underline; font-family: Helvetica; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">users-unsubscribe@shibboleth.net</a></div>
</blockquote>
</div>
<br class="">
<div class="">
<div class=""><br class="">
--<br class="">
David Langenberg<br class="">
Identity & Access Management Architect<br class="">
The University of Chicago</div>
</div>
<br class="">
</div>
</body>
</html>