JiscMail Logo
Email discussion lists for the UK Education and Research communities

Help for JISC-SHIBBOLETH Archives


JISC-SHIBBOLETH Archives

JISC-SHIBBOLETH Archives


JISC-SHIBBOLETH@JISCMAIL.AC.UK


View:

Message:

[

First

|

Previous

|

Next

|

Last

]

By Topic:

[

First

|

Previous

|

Next

|

Last

]

By Author:

[

First

|

Previous

|

Next

|

Last

]

Font:

Proportional Font

LISTSERV Archives

LISTSERV Archives

JISC-SHIBBOLETH Home

JISC-SHIBBOLETH Home

JISC-SHIBBOLETH  June 2007

JISC-SHIBBOLETH June 2007

Options

Subscribe or Unsubscribe

Subscribe or Unsubscribe

Log In

Log In

Get Password

Get Password

Subject:

Re: Anyone using ArpViewer or Autograph?

From:

John Paschoud <[log in to unmask]>

Reply-To:

Discussion list for Shibboleth developments <[log in to unmask]>

Date:

Thu, 14 Jun 2007 12:51:08 +0100

Content-Type:

text/plain

Parts/Attachments:

Parts/Attachments

text/plain (165 lines)

I agree with Richard that the Federation should expand the 'standard'
attributes and value-ranges it recommends; that may (or may not) include
making more mandatory (but why raise the bar of entry, for institutions
that just want to eliminate what they now do via the centralised Athens
service?)

I don't think that such a review needs to happen before the transition
of all/most of F&HEIs into Fed membership.

John

-----Original Message-----
From: Discussion list for Shibboleth developments
[mailto:[log in to unmask]] On Behalf Of Richard Dunning
Sent: 14 June 2007 11:04
To: [log in to unmask]
Subject: Re: [JISC-SHIBBOLETH] Anyone using ArpViewer or Autograph?

Is this not a case for the Federation mandating attributes? 

There is a potential here for IdPs having to set up bilateral agreements
with all SPs they wish to connect to...   


Best regards 

Richard Dunning


Eduserv
innovative technology services 

  _____  


[log in to unmask]

tel: +44 (0)1225 474317
fax: +44 (0)1225 474332

http://www.eduserv.org.uk 

  _____  


-----Original Message-----
From: Discussion list for Shibboleth developments
[mailto:[log in to unmask]] On Behalf Of Alistair Young
Sent: Thu 14 June 2007 10:42
To: [log in to unmask]
Subject: Re: Anyone using ArpViewer or Autograph?

yes, I think it's important to remember that users should not be exposed
to the current attribute vocabulary. i.e. "do you want to release your
userRole attribute to this service provider?" will flood the helpdesk
with "what's my userRole attribute?" questions.

"Do you want to let the Service Provider know your email address?" is
what they should be asked and the IdP should do that mapping. But then
again, IdPs don't know what attributes the SP wants. Most SPs take a
blunderbuss approach, getting the IdP to release everything and then
sifting to see if what has arrived is enough to grant access.

Remember that your first name can be transported in any number of
attributes depending on which SP wants it. So you should be asked about
your first name, not your
urn:very:long:urn:eduThingyNeverHeardOfThatAttribute.

The IdP is an attribute babel fish:
http://en.wikipedia.org/wiki/Babel_fish

Alistair


--
mov eax,1
mov ebx,0
int 80h

> first off, i  would supply a simple and advanced intereface, with 
> simple NOT giving any of these problematic terms. Let them give less 
> granular sets of permissions, perhaps even simply listing,  as 
> Alistair has in his example, that the SP wants some info, and do you 
> want to  give the info to the SP?
>
> Let them drill down into that if they like, with a pref setting to 
> remember. Also, an info box on each attribute type with an easily 
> mod'd institutional entry to give it local context.
>
>
> s
>
> On 14 Jun 2007, at 07:13, Alex Reid wrote:
>
>> At 09:26 PM 13/06/2007, Alistair Young wrote:
>> ...
>>> Wouldn't it be nice to have a graphical interface with icons for SPs

>>> and icons for each of your attributes and you could drag and drop 
>>> your attributes onto each of the SPs.
>> ...
>>> > On Tue, 12 Jun 2007, Chad La Joie wrote:
>> ...
>>> > However I think that an interface that pops up a message during
>>> the Shib
>>> > interaction that says something like:
>>> >
>>> >     To let you access the Journal of Applied Confusion website
>>> >     we need to tell it the following things about you:
>>> >
>>> >        Affiliation:            [log in to unmask]
>>> >        Anonymous identifier:   [log in to unmask]
>>> >        Inside leg measurement: 820mm
>>> >
>>> >     Do you want us to:
>>> >
>>> >       a) Do so this one time
>>> >       b) Do this now and for this site in future
>>> >       c) Do this now and for _all_ sites in future
>>> >
>>> > would probably make sense to most users.
>>
>> I agree with both these suggestions in principle, but some of the 
>> attributes are so arcane (eg eduPersonPrincipalName (and distinctions

>> between that, sn and cn), eduPersonScopedAffiliation, 
>> eduPersonTargetedID - all of which we are planning to make "must 
>> haves" for the Australian Federation) that I strain to think about 
>> they can be conveyed meaningfully to users.  Anyone any ideas?
>>
>> Cheers, Alex.
>>
>> -------------------------------------------------------
>> T Alex Reid
>> Director, eResearch/Middleware
>> AARNet Pty Ltd
>> c/- 71A Raymond Street, Yokine, 6060
>> Western Australia
>> ph  +61 8 9345 0440
>> mobile  +61 40 888 5515
>> email  [log in to unmask]
>> web  http://www.aarnet.edu.au/engineering/middleware/
>>
>



Unless otherwise agreed expressly in writing by a senior manager of
Eduserv, this communication is to be treated as confidential and the
information in it may not be used or disclosed except for the purpose
for which it has been sent.
If you have reason to believe that you are not the intended recipient of
this communication, please contact the sender immediately.
No employee or agent is authorised to enter into any binding agreement
or contract on behalf of Eduserv or Eduserv Technologies Ltd., unless
that agreement is subsequently confirmed by the conclusion of a written
contract or the issue of a purchase order.
Eduserv (Limited by Guarantee) - company number 3763109 - and Eduserv
Technologies Ltd - company number - 4256630 - are both companies
incorporated in England and Wales and have their registered offices at
Queen Anne House, 11 Charlotte Street, Bath, BA1 2NE.


Please access the attached hyperlink for an important electronic communications disclaimer: http://www.lse.ac.uk/collections/secretariat/legal/disclaimer.htm

Top of Message | Previous Page | Permalink

JiscMail Tools


RSS Feeds and Sharing


Advanced Options


Archives

November 2023
February 2023
January 2023
November 2022
October 2022
September 2022
June 2022
January 2022
November 2021
October 2021
September 2021
May 2021
April 2021
March 2021
February 2021
January 2021
December 2020
November 2020
October 2020
September 2020
July 2020
June 2020
May 2020
April 2020
March 2020
February 2020
January 2020
December 2019
November 2019
October 2019
September 2019
August 2019
June 2019
May 2019
March 2019
February 2019
January 2019
November 2018
July 2018
June 2018
May 2018
April 2018
March 2018
January 2018
November 2017
October 2017
September 2017
August 2017
July 2017
June 2017
May 2017
March 2017
February 2017
January 2017
October 2016
September 2016
August 2016
July 2016
June 2016
May 2016
March 2016
February 2016
January 2016
December 2015
November 2015
September 2015
August 2015
June 2015
April 2015
March 2015
February 2015
December 2014
November 2014
October 2014
September 2014
August 2014
July 2014
June 2014
May 2014
April 2014
March 2014
February 2014
January 2014
December 2013
November 2013
October 2013
September 2013
August 2013
June 2013
May 2013
April 2013
March 2013
February 2013
January 2013
December 2012
November 2012
October 2012
September 2012
August 2012
July 2012
June 2012
May 2012
April 2012
March 2012
February 2012
January 2012
December 2011
November 2011
October 2011
September 2011
August 2011
July 2011
June 2011
May 2011
April 2011
March 2011
February 2011
January 2011
December 2010
November 2010
October 2010
September 2010
August 2010
July 2010
June 2010
May 2010
April 2010
March 2010
February 2010
January 2010
December 2009
November 2009
October 2009
September 2009
August 2009
July 2009
June 2009
May 2009
April 2009
March 2009
February 2009
January 2009
December 2008
November 2008
October 2008
September 2008
August 2008
July 2008
June 2008
May 2008
April 2008
March 2008
February 2008
January 2008
December 2007
November 2007
October 2007
September 2007
August 2007
July 2007
June 2007
May 2007
April 2007
March 2007
February 2007
January 2007
December 2006
November 2006
October 2006
August 2006
July 2006
June 2006
May 2006
April 2006
March 2006
February 2006
January 2006
December 2005
November 2005
October 2005
September 2005
August 2005
July 2005
June 2005
May 2005
April 2005


JiscMail is a Jisc service.

View our service policies at https://www.jiscmail.ac.uk/policyandsecurity/ and Jisc's privacy policy at https://www.jisc.ac.uk/website/privacy-notice

For help and support help@jisc.ac.uk

Secured by F-Secure Anti-Virus CataList Email List Search Powered by the LISTSERV Email List Manager