Subject: Re: [xwiki-dev] OpenID, Shibboleth and other identity technologies for xwiki
Hi Vincent,
Your absolutely correct there are many alternatives each with their own
various positives and negatives.
A review of the solutions available is always a good idea.
However I am pretty confident nothing else matches the ESOE for its
feature set at this stage, but of course I would be happy to be proven
wrong :).
regards,
Bradley
Vincent Brousseau wrote:
> OpenSSO could also be an interesting alternative
> (
https://opensso.dev.java.net/).
>
> It started off the codebase of Sun Java System Access Manager so it's
> heavy, but definitely enterprise grade.
>
> There are many other solutions of that kind, perhaps they should be
> reviewed first before going on with an integration in XWiki.
>
> Vincent
>
>
> On 5/7/07, Bradley Beddoes <beddoes@intient.com> wrote:
>>
Hi,
>> Responses inline below.
>>
>> Sergiu Dumitriu wrote:
>> > Hi,
>> >
>> > This looks good, congratulations!
>> >
>> > It would be nice if it could be integrated in XWiki (with your kindly
>> > offered help), as it provides support for many authentication
>> > protocols. However, this must not be done in a haste. We should
>> > establish some goals, an implementation plan (including eventual
>> > changes needed in the XWiki engine), and a target version. I think
>> > that 1.0 is out of the question, so we need to decide if it is a
>> > feature that must go into 1.1 or it can wait until the XWiki 2.0
>> > architecture is finalized.
>> >
>> > (@Vincent) Should we establish a developer meeting on IRC to discuss
>> > this? Or are mailing lists OK?
>>
>
>> > On another topic, how stable is the ESEO API? Can we count on a
>> > future-compatible integration?
>>
>> The really cool part is that the integration on the application side for
>> pure identity transfer is minimal, especially in java with the use of
>> filters.
>>
>> If you'd like to take it further and integrate authorization to the
>> ESOE's policy decision point (and I think it would be a god idea) that
>> would take a little longer.
>>
>> The API itself should be pretty static from this point forward, while
>> we've got it tagged at 0.1 in reality its a lot further ahead then that,
>> infact we're rolling into production at some sites shortly.
>>
>> regards,
>> Bradley
>>
>>
>> >
>> > Thanks,
>> > Sergiu
>> >
>> > On 5/8/07,
Bradley Beddoes <beddoes@intient.com> wrote:
>> >> Hi,
>> >> In later March there was a thread about openID support for xwiki,
>> at the
>> >> time I mentioned new project we were about to launch which could solve
>> >> the openID issue as well as shibboleth, active directory and LDAP
>> >> integration.
>> >>
>> >> That software is now available at
http://esoeproject.org>> >>
>> >> Have a look at what it can offer I would be happy to work with the
>> xwiki
>> >> community further to integrate appropriately.
>> >>
>> >> regards,
>> >> Bradley
>> >>
>> >>
>> >>
>> >
>>
>>
>>
>>
>> --
>> You
receive this message as a subscriber of the
>> xwiki-dev@objectweb.org mailing list.
>> To unsubscribe: mailto:xwiki-dev-unsubscribe@objectweb.org
>> For general help: mailto:sympa@objectweb.org?subject=help
>> ObjectWeb mailing lists service home page:
http://www.objectweb.org/wws>>
>>
>