Shibboleth Developer's Meeting, March 07, 2014

...

Attendees: 

Call Administrivia

10:00 Central US / 11:00 Eastern US / 16:00 UK

Dial-in attendee identification.

...

• Relying party and Profile configuration parsers
• Hunting for a side channel for spring parsing so we tease RP&profile config away from metadata.

Scott

• Build "new" style transient NameID generators sharing code with old attribute defns
• Refactored subject-config beans to reduce user-space visibility into the guts
• We still need to do Persistent/Stored ID work, generation and consumption

• Completing refactored SAML building actions, moving a lot of code into OpenSAML, creating lookup functions to access IdP config/state
• Started reviewing security parameter positioning
• Started updating SAML 1 SSO profile flow documentation to find the missing bits and fill them in
• Looking for places to de-emphasize BasicMessageMetadataContext

Tom

• IDP-380 Spring Tool Suite ? Add Spring nature to .project(s). Only use the required and Web Flow plugins ?
• Would like to avoid system properties.
  • JNDI ?
• Running IdPv2 in Eclipse.
  • Would we ever change the compiler version from 1.6 in v2 parent POM ?
  • Educating myself regarding client cert authn, i.e. the DTA plugins
    • Supposed to send my DTA test scripts to Unicon
• IDP-369 Prototype checking : move to spring-extensions
• JSPT-43 IdentifiableBeanPostProcessor : move to spring-extensions
  • Need to identify Spring context "boundaries" so that post processors are configured in XML properly
    • Abstract flow definitions files to make context creation "boundaries" clear
• Maybe talk about Component, Identifiable/Identified/Initialized/Destructable Component stuff.
• Eclipse 4.3.2
  • Subversion 1.8

...