SimpleSAMLphp

I've started implementing a simpleSAMLphp authentication module for drupal. Not completed yet, but close... Send me an email if you are interested in testing this module.

Flyspray is an uncomplicated, web-based bug tracking system for assisting with software development. Attached is a patch that connect flyspray to simpleSAMLphp, which enabled federated login to a shibboleth or SAML 2.0 federation. Flyspray is used for bugtracking in eduGAIN.

How to configure a Shibboleth 1.3 SP to work with a simpleSAMLphp IdP or bridge. Document placeholder not yet written. Input welcome.

How do you setup Apache properly for production? How do you configure PHP best for security? Secure cookies, packet filters, load balancing, failover, session handler plugins, logging, statistics and monitoring.

Here are some advanced features in simpleSAMLphp that are not covered in the standard install and configuration guides. Example of topics includes bridging protocols and attribute name mapping, convertion and attribute injection.

A log of changes in simpleSAMLphp.

First you should have a personal certificate, then download the UNINETT CA - which is attached to this blog entry. Open network preferences, click on airport: Click advanced... Go to the 802.1X tab, choose User domain, enter your username, give the ... [More] profile a name, set eduroam as the SSID. Check the TLS protocol. Click configure at the TLS protocol, and select your eduroam certificate. [Less]

I've just commited to the simpleSAMLphp subversion repository a fix that will allow SAML 2.0 Single LogOut to propagate between one federation to another trough a SAML 2.0 <-> SAML 2.0 bridge. Click on the image to view it larger.

I've started to update the documentation to correspond to the next release of simpleSAMLphp, version 1.0. The installation guide doesn't require that much changes, so it will still do the work. Nontheless, I will go through it, updated the ... [More] screenshots and check the text. I've updated the "Using simpleSAMLphp as a service provider" document: Using simpleSAMLphp as a service provider As simpleSAMLphp is not yet released, I wanted to keep both the new version of the document as well as the old version that correspond to v0.5 available on rnd.feide.no at the same time, so I had to write some code to keep track of document revisions. Here is how it looks like (the most recent document will always be the default): [Less]

simpleSAMLphp final version 1.0 is scheduled to be released medio March 2009. There will not be added much functionality from now on, mostly bugfixes, improvements, optimalizations, polishing and writing documentation. If you want to try out the ... [More] functionality in 1.0 already, you can download the preview 1 zip file. If you know how to use subversion, you can checkout revision 219, which would be the same as the zip file, but when you have a checkout version it is much easier to upgrade, basicly you just type in "svn up". [ simpleSAMLphp 1.0 preview 1 ] Note that the simpleSAMLphp documentation is not updated to cover version 1.0 functionality, so you're on your own. The documentation will be updated and improved during February 2008. Both the documentation for v0.5 and v1.0 will then be available on rnd.feide.no. [Less]