SimpleSAMLphp

I’ve added a new menu item called “Categories”. Here you can view blog entries, pages, slides etc sorted by categories. In example, if you are interested in reading about SAML 2.0 related posts only, go to “Categories” and select SAML 2.0.

We have an early version of SimpleSAMLphp support of Managed Cards. With this new add-on, simpleSAMLphp should be capable of generating Infocards and issuing token on requests of Relying Parties and Identity Selectors. We are discussing the proper way of integrating this into simpleSAMLphp body. Any ideas and suggestions will be welcome.

Search on simplesamlphp on google yields more than 2.5 million hits. Great! Hope it soon shows up on Google trends.

I’ve done some performance testing with simpleSAMLphp as an IdP. There are several factors that affect the throughput, including session size, session handler, etc. In our test setup we used memcache as session handler and a session size of 1k (a ... [More] couple of attributes). The server was on HTTPS, using Apache pre-forked. We used a distributed JMeter setup, with my laptop to control the attack, and 4 of my colleges office computers to perform the “attack”. There was ONLY ONE server (remember that you can loadbalance simpleSAMLphp to multiply the performance, we’ll soon extends the performance tests to include LB). The server was a blade server with 8x 2.8GHz Intel Xeon CPUs and 32GB memory. While doing 12000 per minute (200 logins per second) the server still was able to process logins from a independent server, although sometimes the request did hang for a long time before beeing processed. We did not use an LDAP in our test setup. Remember that your LDAP may be a bottleneck. [Less]

Documentation on how to setup and use the simpleSAMLphp statistics module.

Finally! Although not very well tested, or documented yet, the functionality is in place. What’s added today was: A new cron module: The cron module provides a web page that run tasks that should run regularly. Setup crontab to fetch this web page ... [More] hourly and daily. The cron module also provides a hook for other modules to run tasks regularly. read more [Less]

If you’re tired of XML and verbose markup languages, the best readable (and writable) markup language I’ve seen is Markdown. Read more about the Markdown markup over at Daring Fireball Read about John Gruber at wikipedia I’ve started using it as ... [More] input format for drupal, and I’m considering whether it could compete with docbook when it comes to writing technical documentation. What do you think? One big feature that markdown has over docbook is that it can be parsable in realtime (on web). Doing XSLT on docbook is really taking CPU and time. I also would like it as a input format for Dokuwiki, but could not find any stable available module. BTW: Textile looks terrible - I don’t understand it, do you? [Less]

Mark Dixon says: Today is the official release date of Sun’s OpenSSO Enterprise product, the 8.0 version of the product set formerly known as the “Access Manager/Federation Manager”, which was publicly announced on September 30th. Can be ... [More] downloaded here Mark Dixon’s blog If you have experience with OpenSSO (Enterprise) contact me and tell me what you think. My impression is that Sun is moving towards simpler deployments - something I like. [Less]

I’ve started some work on SAML 2.0 usability from a service provider’s point of view. The more complex architectures you make with SAML 2.0, often the usability suffers. In particular series of “Where are you from” interfaces, and service provider ... [More] not already know about an existing SSO sessions are the two main problems I try to solve. Passive AuthNRequests and discovery service requests, and globally stored IdP selection cookies are functionalities that can be used to solve these usability challenges. In the figures below, a popular IdP means an IdP where a significant percentage of potential users come from this specific IdP. Use case 1: Service Providers that allow anonymous access Here is a flow chart for improved usability: Use case 2: Service Providers that allow anonymous access [Less]

I’m back from EuroCAMP in Athens, where I held three presentations: SAML 2.0 Software Comparison SimpleSAMLphp OpenWiki and Foodle Tomorrow I’m attending “Forskninsnet konferansen” in Kolding, Denmark, to give a presentation about simpleSAMLphp. ... [More] The slides will be available online during this week. When I’m back I hopefully get some more time to code, respond to emails and proceed on Kalmar and eduGAIN integration work. [Less]