Interfacing to Other Authentication Systems: Difference between revisions

From RavenWiki
Jump to navigationJump to search
(Created)
 
(→‎Shibboleth: Updated)
Line 3: Line 3:
==Shibboleth==
==Shibboleth==


[http://shibboleth.internet2.edu/ Shibboleth] is a Federated Security Infrastructure being developed in the USA and increasingly being considered for use within .ac.uk. [http://www.educause.edu/pub/eq/eqm04/eqm0442.asp Federated Security: The Shibboleth Approach] is a good introduction.
[[Shibboleth]] is a Federated Security Infrastructure developed in the USA and increasingly being considered for use within .ac.uk. The Computing Service is (as of January 2007) investigating how the existing Raven service can be extended to additionally support Shibboleth authentication.
 
Part 3 of "Web Services Security", Bilal Siddiqui, talks about SAML (the Security Assertions Markup Language) which is what underpins Shibboleth. [http://webservices.xml.com/pub/a/ws/2003/03/04/security.html Part 1] [http://webservices.xml.com/pub/a/ws/2003/04/01/security.html Part 2] [http://webservices.xml.com/pub/a/ws/2003/05/13/security.html Part 3] [http://webservices.xml.com/pub/a/ws/2003/07/22/security.html Part 4]


==OpenID==
==OpenID==


[http://openid.net/ OpenID] is a decentralized identity system that appears to have connections with the [http://www.livejournal.com/ LiveJournal] community. At least one member of the University has constructed a bridge between Raven and OpenID.
[http://openid.net/ OpenID] is a decentralized identity system that appears to have connections with the [http://www.livejournal.com/ LiveJournal] community. At least one member of the University has constructed a bridge between Raven and OpenID.

Revision as of 08:05, 19 February 2007

There are many web-based authentication systems. Some of these systems can or must delegate actually identifying people to other systems. Delegating to Raven would allow members of the University to dispence with yet another password.

Shibboleth

Shibboleth is a Federated Security Infrastructure developed in the USA and increasingly being considered for use within .ac.uk. The Computing Service is (as of January 2007) investigating how the existing Raven service can be extended to additionally support Shibboleth authentication.

OpenID

OpenID is a decentralized identity system that appears to have connections with the LiveJournal community. At least one member of the University has constructed a bridge between Raven and OpenID.