An open Single Sign On (SSO) solution for the web, a problem also addressed by OpenID.

learn more… | top users | synonyms

1
vote
2answers
116 views

Should every SAML identity provider provide a unique public certificate to the service provider?

When accepting public keys from someone setting up an identity provider for access to resources protected by a service provider using SAML 2.0, do you absolutely need to have a unique certificate? Is ...
0
votes
0answers
10 views

Help with SAML 1.1 token request and response

I need to communicate with a service with SAML 1.1 based security and have a number of very basic questions. First I'm supposed to send a token request to the STS with a "Assertion token" in base 64 ...
0
votes
0answers
17 views

Authorization using shibboleth sso

We have integrated shibboleth web sso into our application to authenticate the user, Now we want to do authorization for our application. The below is the process which is i am thinking for authz. ...
0
votes
0answers
16 views

How does WebID fit in the SAML picture?

How does WebID fit in the SAML picture? Are they related or completely unrelated? Can they work together? If yes, what are the benefits?