Shibboleth Developer's Meeting, Oct 24, 2014

Call Administrivia

10:00 Central US / 11:00 Eastern US / 16:00 UK

Normal schedule is to skip next Friday as it's the last Friday of the month. Any reason to vary that?

60 to 90 minute call window.

Call Details

This week's call will use the Lync system at OSU. To participate, call:

+1 (614) 688-1800 (please use if possible)
+1 (800) 678-6114 (use only if you're charged for the 614 number)

The Conference ID is: 738127#

International participants should be able to access the 800 number without charge through Skype.

Attendees:

Brent

Daniel

Ian

Marvin

Completed profile-based CAS component configuration. Working on relying party configuration selection ala SelectRelyingPartyConfiguration/RelyingPartyConfigurationResolver. Expect to finish by next Fri with population of cas modules in java-identity-provider project.

Rod

Code tidy. Knock off a few old cases still hanging around
Installer. Adding (optional) AD config to windows install
Input needed:
- SAML2 Attribute query
- Chris Phillips's question about multi config load/ multi attribute load.

Scott

V2 changes done, patch Monday after next?
Attribute resolver testing and fixes, mostly done except for LDAP change I caused.
Will start looking at V3 -> V3 installer issues next
Started on SOAP logout endpoint stub, should finish next week while traveling
Need to redo attr-checker as an intercept flow
Need to build a Scripted impl of subject c14n

Reconfig'd shibboleth.net SP with Dynamic metadata, need to research some of what it's logging, but no problems so far
Project planning...

Tom

Consent
- Blank userspace flows
  - I don't really like what I did, but the terms-of-use and attribute-release consent flow definition files in userspace are blank, their parents are in system/. I was thinking that this would present a blank slate for customization, but webflow "inheritance" is actually merging and I'm not sure we want to even pretend to know how folks could manage to get confused with that, with mergeable and non-mergeable elements, etc. So, maybe we should not have blank flows in userspace, and leave the beans in system/.
- Revoke terms of use consent ?
  - The uApprove toggle on the login page for consent revocation is only for attribute release, should that include revocation of terms of use as well ?
- TODO :
  - revisit error handling
  - cookie size limits
  - non-browsers
Do we still need the IdPPropertiesApplicationContextInitializer now that we have an installer ? If we need it, I'll need to look at IDP-378 (Tomcat and ../).

Other