Comment on proposal ROL-1534 - add support for openID and/or SAML 2.0

[ma...@email.cz]

Hello,

I'd like to propose an addition to the proposal "Externalize User and Permissions Management" consisting of adding support for authentication via OpenID and/or SAML 2.0.

Users are already lost in the tens of identities (logins, passwords) they have to manage and the single sign on activities like OpenID and SAML are great tools for getting rid of the problem and gaining the ability to log into many services with a single identity. Both of them are gaining popularity, you can already use for example SAML to access Google docs/mail/.. , VeriSign is an OpenID provider etc.

I'm sure that many people would appreciate the ability to use their OpenID/SAML accounts and providers to access Roller.

Nest regards, Jakub Holy

Re: Comment on proposal ROL-1534 - add support for openID and/or SAML 2.0

[Phillip Rhodes <mi...@cpphacker.co.uk>]

maly.velky@email.cz wrote:
> Hello,
>  I haven't any code but I'm sure we could find existing open modules for doing the authentication via openID/SAML and only would need to write the code to integrate them with the forthcoming Externalized User And Permissions Management.
> 
> If you need I could perhaps help with implementing this.
> 
> PS: Some libraries we could use: http://code.google.com/p/openid4java/ , http://www.opensaml.org/, https://opensso.dev.java.net/ (CDDL)
> Also Spring Acegi is going to support openID - it has already the code in the sandbox and the person responsible for it recently expressed willingness to do something about it.
> 

For OpenID, there are two approaches we're considering for OpenQabal: 1. 
use the Acegi OpenID support directly, or 2. use CAS in a sort of 
"multi-hop" scenario.  Supposedly it's already been demonstrated that 
CAS can use OpenID in turn, meaning anything that can use CAS (which 
Roller can, through Acegi) can use OpenID.

I'd hoped to start working on getting this into OpenQabal one way or
another, fairly soon.  If I come up with anything that looks like it'll
be useful to the Roller community, I'll let you guys know.  Conversely
if somebody here implements something, we may adopt that approach. :-)

For SAML and WS-Federation, we really haven't even started looking
seriously at how to do that.  But as before, if we come up with anything
usable, it will, of course, be available to the Roller community as well.


TTYL,

-- 
Phillip Rhodes
Chief Architect - OpenQabal
https://openqabal.dev.java.net

Re: Comment on proposal ROL-1534 - add support for openID and/or SAML 2.0

[ma...@email.cz]

Hello,
 I haven't any code but I'm sure we could find existing open modules for doing the authentication via openID/SAML and only would need to write the code to integrate them with the forthcoming Externalized User And Permissions Management.

If you need I could perhaps help with implementing this.

PS: Some libraries we could use: http://code.google.com/p/openid4java/ , http://www.opensaml.org/, https://opensso.dev.java.net/ (CDDL)
Also Spring Acegi is going to support openID - it has already the code in the sandbox and the person responsible for it recently expressed willingness to do something about it.

> ------------ Původní zpráva ------------
> Od: Dave <sn...@gmail.com>
> Předmět: Re: Comment on proposal ROL-1534 - add support for openID and/or SAML
> 2.0
> Datum: 23.1.2008 04:48:37
> ----------------------------------------
> On Jan 18, 2008 8:15 AM,  <ma...@email.cz> wrote:
> > I'd like to propose an addition to the proposal "Externalize User and
> Permissions Management" consisting of adding support for authentication via
> OpenID and/or SAML 2.0.
> >
> > Users are already lost in the tens of identities (logins, passwords) they have
> to manage and the single sign on activities like OpenID and SAML are great tools
> for getting rid of the problem and gaining the ability to log into many services
> with a single identity. Both of them are gaining popularity, you can already use
> for example SAML to access Google docs/mail/.. , VeriSign is an OpenID provider
> etc.
> >
> > I'm sure that many people would appreciate the ability to use their
> OpenID/SAML accounts and providers to access Roller.
> 
> I agree. That would be a nice addition to Roller.
> 
> Do you have code to contribute?
> 
> - Dave
> 
> 
> 

Jakub Holy
maly.velky@email.cz

Re: Comment on proposal ROL-1534 - add support for openID and/or SAML 2.0

[Dave <sn...@gmail.com>]

On Jan 18, 2008 8:15 AM,  <ma...@email.cz> wrote:
> I'd like to propose an addition to the proposal "Externalize User and Permissions Management" consisting of adding support for authentication via OpenID and/or SAML 2.0.
>
> Users are already lost in the tens of identities (logins, passwords) they have to manage and the single sign on activities like OpenID and SAML are great tools for getting rid of the problem and gaining the ability to log into many services with a single identity. Both of them are gaining popularity, you can already use for example SAML to access Google docs/mail/.. , VeriSign is an OpenID provider etc.
>
> I'm sure that many people would appreciate the ability to use their OpenID/SAML accounts and providers to access Roller.

I agree. That would be a nice addition to Roller.

Do you have code to contribute?

- Dave