RE: SAML

Thanks - I will look into this

-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of John Jones
Sent: Thursday, October 01, 2009 4:05 PM
To: Midrange Systems Technical Discussion
Subject: Re: SAML

I would suggest you not roll your own and look for an established SAML
product like Ping Federate from Ping Identity (
http://www.pingidentity.com/). They can run on a local Windows box or
as a service (PF Express) and
have connectors for interaction with Java, Apache, Active Directory, etc.

My current employer uses Ping Federate but not for i integration. We do
SAML 1.x and 2.0 (which are different) with more than a dozen clients.
Bringing a new client online can take as little as a few hours with the most
effort being mapping their identity fields to our equivalents. The whole
thing is wizard-based.

On Thu, Oct 1, 2009 at 2:23 PM, Mike Cunningham <mike.cunningham@xxxxxxx>wrote:

Has anyone ever done any work using SAML (Security Assertion Markup
Language) on an iSeries either in RPG or Java? SAML is XML based and uses
HTTP and SOAP so I would suspect it should be possible. We are looking into
two different projects, both of which would involve using Shibboleth for
passing identity information back to the requesting organization. One of
these projects would involve passing back information contained in MS Active
Directory but the second could end up needing to send back data from a DB2
database on the iSeries. Which would mean writing our own application to
accept the request, look in the database and pass back the necessary
attributes.
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.