[Concordia] Required Claim

Ari Kermaier ari.kermaier at oracle.com
Sat Apr 5 21:35:53 EDT 2008


I thought we agreed that, aside from the authn mechanism URI, the required claims would be givenname and surname.
::Ari

  -----Original Message-----
  From: community-bounces at projectconcordia.org [mailto:community-bounces at projectconcordia.org]On Behalf Of Ashish Jain
  Sent: Saturday, April 05, 2008 3:52 PM
  To: community at projectconcordia.org
  Subject: [Concordia] Required Claim


  Is there any agreement on what should be the required claim (other than the AuthnContext)? 
  Should this be PPID or givenname? I'm testing with various providers and don't see this being consistent. 
  I can get around by a bunch of if/else statements, but it would be nice if we can agree on a single user identifier for the Infocard IdP (self and managed) that can be mapped to the subject.
  Thanks.




  On Apr 4, 2008, at 6:23 PM, Caleb Baker wrote:

    Forwarding for anybody not on the OSIS mailing list.

    From: Caleb Baker 
    Sent: Friday, April 04, 2008 4:37 PM
    To: 'user-centric-identity-interop at googlegroups.com'
    Subject: Changes to the federatedIdentity.net site

    Since we are getting close to RSA, I just wanted to send a short mail to let people know about the changes we made to the site today.

    - changed the managed card claim URI’s to use those defined in section 8.5 of the ISIP
    - ignore SubjectConfirmationData at our fed passive RP (instead of throw)
    - added policy lookup table, so registered RP don’t need to provide wreply, we will look it up based on wtream ( below is our current look up table, let me know if anybody else would like to be added)
                    wtrealm     wreply
    https://relyingparty.federatedidentity.net      https://relyingparty.federatedidentity.net/FedPassiveRP/Login.aspx
    https://saml.oracle.com/fed/sp      https://saml.oracle.com/fed/sp/wsfed11
    https://authdev.it.ohio-state.edu/shibboleth    https://authdev.it.ohio-state.edu/Shibboleth.sso/ADFS
    https://cardspace-sp.symlabs.net:8001/sp.xml    https://cardspace-sp.symlabs.net:8001/SP-P
    https://socialphotos.federationportal.com/rsa2008demo      https://socialphotos.federationportal.com/ConcordiaInterop/WS-FedRP.aspx
    - changed our username password managed card to use https instead of message security
    - Added a trust 1.3 endpoint to the echo STS (https://ipsts.federatedidentity.net/MgmtConsole/TestAccount.aspx?cardType=echoCard)


    See ya next week,
    Caleb



    _______________________________________________
    Community mailing list
    Community at projectconcordia.org
    http://lists.projectconcordia.org/mailman/listinfo/community

    Participating in this discussion list does not grant any intellectual property rights or any commitment by the participants of the content discussed to any organization.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.projectconcordia.org/pipermail/community/attachments/20080405/5a744cc2/attachment-0002.html 


More information about the Community mailing list