RE: RSA SAML Interop

["Ciochon, Robert" <Robert.Ciochon@ca.com>]

Title: RSA SAML Interop

Hi Tom,

I expected to nail down the additional information at the dry run when people would be more focused.  If people have this information ahead of time and can share it, that's great, but I know other priorities can take precedence when you're in the office.

Regards,

Bob 

---

From: Thomas Wisniewski [mailto:Thomas.Wisniewski@entrust.com]
Sent: Wednesday, January 26, 2005 10:31 AM
To: Ciochon, Robert
Cc: samldemotech
Subject: RE: RSA SAML Interop

Bob, your request did not have all the necessary questions for the dry run. I would like to xchg this data by the end of this week, if possible. For example, here is the full list of items (with the exception of the signing cert required to verify saml message signatures -- any status on that?).

 

We could xchg metadata for some of these items -- basically the urn-based values (but they should be documented as well).

 

Here is an example:

 

GENERIC

=======

Domain: .entrust.com

IDP Basic: yes

SP Basic: yes

IDP Advanced: yes

SP Advanced: yes

Sample X509SubjectName Name ID: uid=alice,dc=entrust,dc=com

Sample Persistent Name ID: entrustuser1

 

IDP SPECIFIC

==========

IDP Display Name (i.e., IDP Issuer): Entrust

IDP Entity ID: https://idp.entrust.com

IDP SSO Service: https://idp.entrust.com/GetAccess/Saml/SSO/RedirectRequest

IDP SLO Service: https://idp.entrust.com/GetAccess/Saml/SLO/RedirectRequest

IDP SLO Service: https://idp.entrust.com/GetAccess/Saml/SLO/RedirectResponse

IDP MNI Service: https://idp.entrust.com/GetAccess/Saml/MNI/RedirectRequest

IDP MNI Service: https://idp.entrust.com/GetAccess/Saml/MNI/RedirectResponse

 

 

SP SPECIFIC

==========

SP Display Name (i.e., SP Issuer): Entrust

SP Entity ID: https://sp.entrust.com

SP Resource URL: https://sp.entrust.com/GetAccess/ResourceList

// you had a separate url for SP Resoruce and eAuth SP Resource (though we agreed this is the same)?

SP Resource Display Name: Entrust Service Provider

SP Assertion Consumer Service: https://sp.entrust.com/GetAccess/Saml/SSO/PostResponse

// assume the saml index for the above is 0 (implied)

SP SLO Service: https://sp.entrust.com/GetAccess/Saml/SLO/RedirectRequest

SP SLO Service: https://sp.entrust.com/GetAccess/Saml/SLO/RedirectResponse

SP MNI Service: https://sp.entrust.com/GetAccess/Saml/MNI/RedirectRequest

SP MNI Service: https://sp.entrust.com/GetAccess/Saml/MNI/RedirectResponse

 

 

 

Tom.

 

-----Original Message-----
From: Ciochon, Robert [mailto:Robert.Ciochon@ca.com]
Sent: Tuesday, January 25, 2005 12:46 PM
To: samldemoprimary
Subject: RSA SAML Interop

To those of you who already responded to the request for information for the SAML Interop configurations, thank you for your prompt replies.  I am still waiting for replies from DataPower, OpenNetwork, RSA and Symlabs.  I have attached the original email and request a reply by the end of this week so we can prepare for the dry run next Wednesday in Washington DC.

Regards,
Bob

<<RSA SAML Interop 2005 - request for info>>
Robert Ciochon
eTrust Development Manager
Computer Associates
San Diego, California
(858) 625-6866
robert.ciochon@ca.com