Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Shib IdP Enhancements Progresshttps://spaces.at.internet2.edu/display/InCAssurance/Shibboleth+Enhancements+-+Project+Status
David Walker reported that the Shibboleth IDP Enhancements Project is in acceptance testing now. The enhancements will enable a Shibboleth IdP to support the InCommon Assurance Program's multiple assurance profiles, as well as other authentication contexts that may be defined by IdPOs and their partners.  This work could be used to support Multi-Factor Authentication and the work emerging from the Internet2 Scalable Privacy Project.  The  SP specifies one or more AuthN contexts that it will accept in receiving an identity assertion. The decision of  what AUTHN AuthN options to present to the user. are  based on what the SP requests, and on info about the user (retrieved from the IdM system) regarding what AUTHN AuthN contexts that user is certified for (bronze or silver).
It was noted that the CommIT project may also benefit from this Shib Shibboleth Enhancement. Others have solved this problem in a custom way, but this will be a more general tool.

...

The AD Assurance Cookbook has been updated in light of the revised spec ( 1.2 )spec. Community feedback period ended Nov. 8.
The conversations with the AAC about how to interpret  the spec were helpful. Excellent feedback was received from Joe St. Sauver. Brian Arkills responded to those comments on behalf of the group. One of the challenges of the AD Cookbook is keeping the scope to AD technology specific issues or compliance with the silver profile. Some feedback received pertained to things  that are good to do, but not within this defined scope.   

...

To help with this request, InCommon is spinning up a Reading of the Bronze Profile over 8 hour-long biweekly sessions. A week before the call, Ann will announce the section to be discussed so that attendees can review the points and come prepared to discuss. If there are issues that need further illumination, the group will ask for guidance from the AAC.  Look for further details regarding call days and times to be announced on the Assurance list.