SimpleSAMLphp

If you traverse huge XML documents with namespaces, using SimpleXML (in my situation I am traversing SAML 2.0 Metadata documents), you may be interested in doing it stepwise: First doing XPath to list out all entries, then dereference each entry and ... [More] do a new XPath query inside the entry. If you do that, you need to do some trick to maintain the namespaces. Here is how I did it: $simplexml_document = new SimpleXMLElement($xml); read more [Less]

If you want to subscribe to commit messages to the simpleSAMLphp subversion respository, contact me using the contact form and let me know which e-mail address you want me to add. Subscribers will get one e-mail each time a new revision is commited to the subversion repository with the relevant log message.

Bjørn Ove Grøtan and some of his colleagues at the Norwegian University of Science and Technology has during the last months done some great work on SAML 2.0 Service Provider software, both new implementations and testing of available software. What ... [More] is even better, is that he publish information about the progress at a dedicated web page: SAML 2.0 work at NTNU One of the most recent news, is the implementation of a SAML 2.0 SP using the Higgins framework. [Less]

Here are some details about what SAML 2.0 profile is used with Feide: The SAML 2.0 SP will need to send the AuthNRequest using the SAML 2.0 HTTP-REDIRECT binding. This request does not need to be signed. The SP will then receive the SAML 2.0 ... [More] AuthNResponse using the HTTP-POST binding (Browser/Post). This message with be signed with a key corresponding to the certificate included in the IdP metadata document. We are using what is called "attribute push", which means all the agreed attributes will be sent in the AuthNResponse in a attached assertion with an attribute statement. As the attributes are included in the AuthNResponse, there is no need to use the Attribute profile to request attributes. Attributevalues are base64encoded, and multivalued attributes are separated by '_' (after base64 encoding). This is for compatibility reasons for some software that did not suppport utf-8 characters. We will migrate to using plain utf-8 in the values as soon as we know all products will be compatible. read more [Less]

I'll be out of office the rest of 2007. See you again in January! Plans for January includes: Heavy simpleSAMLphp facelift. Production ready SAML 2.0 IdP and SP. Improved documentation, better commented source code, better error handling etc. This ... [More] will be simpleSAMLphp version 1.0. Implementing openwiki.feide.no Implementing a more complete SAML 2.0 Registry Implementing eduGAIN MDS support in simpleSAMLphp Implementing eduGAIN MDS siterefresh script for Shibboleth SP 1.3 [Less]

Here are an example SAML 2.0 AuthNRequest and a SAML 2.0 AuthNReponse as sent using simpleSAMLphp protecting a moodle service against Feide as an SAML 2.0 IdP. To decode SAML 2.0 Requests your self use: SAML 2.0 Decoder at rnd.feide.no Here are the AuthNRequest sent: read more

This week we were pretty busy at UNINETT with arranging the UNINETT 2007 conference. Things went pretty nice, and I hope people was happy with the conference. Part of the new "eduroam ad campaign". If you are launching eduroam in your institusion ... [More] , contact us to hear more about this capaign which can be tailored to your city/university. This showcase was for NTNU. The entrance to the conference Visitors at the Feide "ask the experts" panel. read more [Less]

This presentation was held on the UNINETT2007 conference, in December 2007. I talked about the integrating DokuWiki with Feide, and service integration in general. I also talked about the new idea I have: openwiki.feide.no which we will implement soon.

Today we switch to a brand new webdesign on both feide.no and rnd.feide.no.

Mailinglist for discussing eduroam in Norway. Language is norwegian, but feel free to ask questions in english on the list.