Which version to use?

["Jean-Noel Colin" <jean-noel.colin@oxys.be>]

Hello,

 

We are in the process of defining a Federated Identity Management framework for a large European research project. Our idea is to rely on SAML to develop our model and implementation. The question today is: which version to use? 1.1 or 2.0?

 

Our need are the following:

• the environment is made of eLearning environments (E), through which users (U) access services (S) external to those E.
• one U is linked to a particular E
• S has to make sure that invoking U has been properly authenticated by their environment, and is authorized
• S may be chained: S may invoke another S
• all exchanges are based on Web Services

I would be in favor of SAML 2.0, as it seems that the specification are quite stable now, and ready to be approved as a standard, after the public review phase.  

 

What would be your recommendation?

 

Thanks for your help

 

Jean-Noel Colin

jean-noel.colin@sun.com

jean-noel.colin@oxys.be