OASIS Mailing List ArchivesView the OASIS mailing list archive below
or browse/search using MarkMail.


Help: OASIS Mailing Lists Help | MarkMail Help

saml-dev message

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]

Subject: Re: [saml-dev] SAML2.0 implementations

Thanks a lot for all the information,

Talking about the clasification, sorry if what I am going to say has no sense but, despite the fact I have read some papers about all this stuff, I still get al little bit confused (I hope that's normal :-)), so I hope you can give me some light.

So, In the first level we have the vocabulary, the pure XML schema. We can find here SAML 1.1, SAML 2.0, Liberty, Shibboleth(?).... so schemes that are built above existing ones (I guess SAML is the common base of all of them). This level defines the vocabulary and the semantic meaning.

In the second level we have the profiles (?), so, what can be done using those schemes and how is done; for example, which are the steps must be performed to do a SSO or actions that are possible (defined) in one "tool" and not in another. So, Shibboleth defines one way for doing the things and Liberty another and SAML2.0 another. So, in that level it would be possible to classify the actions that are possible (SSO, federation,...).

Is that more or less right or I am complete lost?

Thanks a lot,


On 12/1/06, Eve L. Maler <Eve.Maler@sun.com> wrote:
I knew I was missing some!  Thanks.  It would indeed be useful to
categorize them a bit more.  What lines would people like to see drawn?


Tom Scavo wrote:
> On 11/30/06, Eve L. Maler < Eve.Maler@sun.com> wrote:
>> I recently compiled a list of major open-source implementations of
>> various SAML and Liberty protocol flavors:
>> http://OpenSSO.dev.java.net (Sun) - Java, "Lightbulb" PHP subproject
>> http://www.OpenSAML.org (Shibboleth) - Java, C++
> (Internet2, not Shibboleth)
>> http://www.SourceID.org (Ping Identity) - Java, .NET, Apache
>> http://LaSSO.Entrouvert.org (Entrouvert) - C
>> http://ZXID.org (Symlabs) - C, scripty wrappers
>> http://www.cahillfamily.com/OpenSource/ - C
> What about Guanxi/Samuel (Java)?
> http://www.guanxi.uhi.ac.uk/
> http://sourceforge.net/projects/guanxi/
>> Maybe this list is worth putting on the SSTC home page?
> In the above list, can we distinguish between SAML toolkits and
> implementations of SAML profiles?  This is an important distinction, I
> think, something that trips up the new user (and me, too :).
> I know that OpenSAML is a toolkit while Shibboleth is a browser
> profile implementation, but I'm not sure about the others.  Can we
> collectively try to classify them, grouped by SAML version?
> Should we put this stuff on wikipedia.org, too?
> Tom
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: saml-dev-unsubscribe@lists.oasis-open.org
> For additional commands, e-mail: saml-dev-help@lists.oasis-open.org

Eve Maler                                         +1 425 947 4522
Technology Director                           eve.maler @ sun.com
CTO Business Alliances group                Sun Microsystems, Inc.

To unsubscribe, e-mail: saml-dev-unsubscribe@lists.oasis-open.org
For additional commands, e-mail: saml-dev-help@lists.oasis-open.org

      /\j__/\  (  \`--.
      \`@_@'/  _)  >--.`.
     _{.:Y:_}_{{_,'    ) )
    {_}`-^{_} ```     (_/

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]