...
In addition to these standards, note that within specific communities of use, additional profiles may be defined to further constrain options, define attributes, etc. People are welcome to maintain pointers to those here.
Document | Summary |
|---|---|
The Internet2 Middleware Initiative has published profiles for the use of SAML attributes (both SAML V1.x and SAML V2.0). These are best practices and naming standards used by at least InCommon and some other federations . Some of the practices described are implemented directly by Shibboleth 1.x, often in ways that don't permit other approacheswith a basis in the SAML 2.0 standard. The original document location is gone and for now an old copy has been placed on our server. | |
SAML V2.0 Deployment Profile for Federation Interoperability Version 2.0 (saml2int) | A deployment profile of SAML 2 representing best practice for use of the standard and its most important extensions. Most other deployment models of SAML are considered deficient at best and outright insecure at worst by the Shibboleth Project team. |
...