Hi, I will provide the list with links when things are available online, expected timeframe is about 3 weeks. regards, Bradley -- Bradley Beddoes Lead Software Architect http://intient.com Intient - "Open Source, Open Standards" Vincent Massol wrote:
Hi Bradley,
On Mar 20, 2007, at 12:16 PM, Bradley Beddoes wrote:
Hi, I have a major piece of the SSO puzzle under development currently, due for release in the next few weeks which targets enterprises, it will be available under the apache 2.0 licence.
It will allow applications such as xwiki to implement the SAML 2.0 spec cleanly using an easy to adapt java library/filter combination between the application (xwiki) and a central point called the "enterprise sign on engine".
The ESOE is an extremely intelligent piece of software supporting many types of internally facing enterprise SSO solutions including automatic sign on for windows machines connected to AD, login to windows, automatically logon to the web tier.
Additionally it supports many external facing SSO solutions including OpenID, Shibboleth 1.3x and Yahoo BB auth to name just the starting line up, its extensible architecture means it can support anything new into the future.
Essentially you make xwiki understand our single service provider and using the ESOE automatically get any kind of SSO/Authentication system available on the planet supported.
If your interested and I hope you are I can post again when its out with the project URL.
That sounds very cool. Could you post some links?
Thanks -Vincent
jeremi joslin wrote:
Hi Artem, I think it's a great idea. But I don't think it's very long to implement. I would prefer you to work on a more generic problematic of single sign on in xwiki. You can implement OpenId and another single sign on a more enterprise oriented than OpenId. WDYT? Jeremi On 3/20/07, Artem Melentyev <[email protected]> wrote:
Hi.
I would like to propose the project:
OpenID[1] support in XWiki.
OpenID is an open, decentralized, free framework for user-centric digital identity. [1]
1) XWiki as openid consumer. Possibility to login into xwiki with openid. Value: major
2) XWiki as openid provider. Some users of xwiki will have openid account like username.xwiki.host or xwiki.host/openid/username For example users in xwiki.com will have openid = username.xwiki.com Value: minor
User story: I have account and virtual wiki at username.xwiki.com. I wish to login with openid into xwiki.org. Standard authentication process with openid[3]: I enter to openid login form at xwiki.org my openid=username.xwiki.com, click sumbit. xwiki.org redirects me to openid authentication page in username.xwiki.com. I enter my password, click submit. username.xwiki.com redirects me back to xwiki.org. Done. I logined into xwiki.org with openid. If I already logined to username.xwiki.com, xwiki.org will not redirects me to username.xwiki.com, and I don't enter password. I may use my openid=username.xwiki.com as normal openid. For example I may write comments to livejournal.com with openid[2].
Advantages: The User needs only one login for all xwikis and openid services. User's openid will be point at homepage on xwiki (possibly). Increase popularity of xwiki project: There are not much openid providers for now. [4] XWiki users will promote xwiki their openids (*.xwiki.com)
There are also bounty($5000) for openid-enabled opensource projects: http://iwantmyopenid.org/bounty
There are other authorization protocols, similar to the technology openid: http://lid.netmesh.org/ http://en.wikipedia.org/wiki/Inames (inames mostly paid) http://yadis.org/ But it is not too common.
Technical details: Possible openid implementations: http://code.google.com/p/openid4java/ or http://code.google.com/p/joid/ Consumer: Then user logins with openid first time, xwiki create special user like XWiki.openid_<user's openid> for a user settings storage. Provider: java servlet.
WDYT?
Is this project suitable for GSoC 2007? Estimated workload: 1-2 man/month
References: [1] http://openid.net/ [2] http://www.livejournal.com/openid/ [3] http://openid.net/about.bml [4] http://openid.net/wiki/index.php/Public_OpenID_providers
-- Artem Melentyev, UralSU, CS401
--You receive this message as a subscriber of the [email protected] mailing list. To unsubscribe: mailto:[email protected] For general help: mailto:[email protected]?subject=help ObjectWeb mailing lists service home page: http://www.objectweb.org/wws
------------------------------------------------------------------------ -- You receive this message as a subscriber of the [email protected] mailing list. To unsubscribe: mailto:[email protected] For general help: mailto:[email protected]?subject=help ObjectWeb mailing lists service home page: http://www.objectweb.org/wws
--Bradley Beddoes Lead Software Architect
http://intient.com Intient - "Open Source, Open Standards"
-- You receive this message as a subscriber of the [email protected] mailing list. To unsubscribe: mailto:[email protected] For general help: mailto:[email protected]?subject=help ObjectWeb mailing lists service home page: http://www.objectweb.org/wws
------------------------------------------------------------------------
-- You receive this message as a subscriber of the [email protected] mailing list. To unsubscribe: mailto:[email protected] For general help: mailto:[email protected]?subject=help ObjectWeb mailing lists service home page: http://www.objectweb.org/wws