Shibboleth Developer's Meeting, 2019-10-04

Call Administrivia

09:00 Central US / 10:00 Eastern US / 15:00 UK / 17:00 FI

Calls are normally the 1st and 3rd Fridays of each month. Next call would be Friday 2019-10-18. Any reason to deviate from this?

60 to 90 minute call window.

Call Details

This week's call will use the Zoom system at GU, see ZoomGU for access info.

AGENDA

EDS (Rod)
- Yet another new format
- Icon sizes
- Reflect back preferred languages
ldaptive migration (if Daniel's on)
SP build process

Brent

Daniel

Henri

Not much time for development due to traveling and OIDC-plugin tutorial preparations

Ian

Marvin

Phil

Testing CSRF protection using FlowExecutionListener approach.
- As part of a Password and Duo MFA flow (CSRF FlowExecutionListener testing for MFA). Works fine.
- As part of some external authentication mechanism (CSRF FlowExecutionListener testing for External Authentication). Probably just want to exclude them, but there are some options.

Rod

FailFast IDP-1181 - Getting issue details... STATUS This may well be done now
A slew of EDS RFE's. See agenda
SSPCPP-868 - Getting issue details... STATUS
V4 Installer. Slow progress (other things keep on getting in the way)
- I'm using more and more ANT Tasks with java used purely for Orchestration. This is proven technology (and doesn't have unexpected side effects)

Scott

Security issues
CPPXT-145 - Getting issue details... STATUS
CentOS 8
Brain is in SP land again so have been looking at small enhancements for a 3.1 release
Not much IdP progress of late

Tom

Other