About SimpleSAMLphp 2009
•
2 likes•1,705 views
A generic presentation of SimpleSAMLphp. Made in 2009.
Recommended
Recommended
More Related Content
Similar to About SimpleSAMLphp 2009
Similar to About SimpleSAMLphp 2009 (20)
More from Andreas Åkre Solberg
More from Andreas Åkre Solberg (20)
Recently uploaded
Recently uploaded (20)
About SimpleSAMLphp 2009
- 1. Generic presentation Updated: November 2009 simpleSAMLphp Andreas Åkre Solberg andreas.solberg@uninett.no
- 2. What is it? Software with focus on SAML (both SP and IdP), but with support for multiple protocols.
- 3. Widespread • Wide adoption, and interest is increasing… • Mostly Europe and US. Both commercial / educational. • 350 users on mailing-list. • Translated into 20 languages • IDDY-award in California 2008. Visitors of project homepage demography ›
- 4. Project structure Project leader 1 Main developers 2 Secondary commiters ~5 Contributors ~ 15
- 5. Why people like it • easy to install and maintain just drop a folder to install :) • aut • easy to extend hent • pro ication s cess o ing fi urces • fully modularized • the lt mes ers • hoo ks • very helpful open source community.
- 6. Version 1.5 (October 2009) with improved interoperability with Shibboleth • automated shibboleth-style metadata consumption • Improved experience with combined SAML 1.1 and SAML 2.0 envir. • Improved SAML 1.1 + 2.0 integrated IdP Discovery Service. • SAML 1.1 Artifact binding • encrypted NameIDs
- 7. Multiple protocols • SAML 2.X SP • SAML 2.X IdP • Shib 1.3 SP • Shib 1.3 IdP • OpenID Provider • OpenID Consumer • OAuth • WS-Fed / ADFS •!Radius client • Infocard •!LDAP • Twitter auth • CAS • SQL • Facebook auth •!YubiKey *) some protocols experimental support
- 8. Protocols can be bridged! le I mp Exa SAML 2.0 IdP SimpleSAMLphp bridge acting as OpenID Provider and SAML 2.0 SP
- 9. Protocols can be bridged! le II mp Exa SAML 2.0 SAML 1.1 SP IdP SimpleSAMLphp bridge acting as SAML 2.0 IdP and SAML 1.1 SP
- 10. Scalable from simple Apache 2 + PHP 5 simpleSAMLphp
- 11. Load balanced Load balanced Load balanced to not so Fail over memcac he 1C memcac he 2C memcac he 3C simple Fail over memcac he 1B memcac he 2B memcac he 3B with the memcache Fail over memcac he memcac he memcac he sessionhandler 1A 2A 3A Apache 2 Apache 2 Apache 2 Apache 2 PHP 5 PHP 5 PHP 5 PHP 5 simpleSAML simpleSAML simpleSAML simpleSAML php php php php Load balan cer
- 12. Performance Last performance test on IdP: ~ 12.000 SAML logins per minute on one server instance Possible because of the lightweight design from the group up.
- 13. "Self-check" API • Santity-check API allows you to check if everything is "OK". • Can be connected to monitoring systems like NAGIOS. • Hooks for adding sanity check tests in external modules.
- 15. User consent
- 16. Fancy Robust Single Log-Out
- 17. IdP Discovery Service • Tabbed interface • Drop-down free • Incremental live search
- 18. Timed-out HTTP-POST Rescue SimpleSAMLphp rescues the user's data when session is timed out . The wiki AFAIK No other use-case software does. What will happen if save and you the sessio timed out n is ?
- 19. Easy log lookup with TrackID