Page History

...

Office 365 and Rich Client Support in a federated environment, solved by proxies, can this scale to solve other problems

DATE: 20 November 2012

TIME: 15:00-15:45

ROOM: Alternative

TOPIC: Proxies in a federation environment

CONVENER: Joost

SCRIBE: Brook

# of ATTENDEES: Roland vRW, Martin, Klaas, Ajay, Lukas

MAIN ISSUES DISCUSSED 

1. Clients (humans) are happy when Google stores an additional password to provide the service.
   1. Users are "educated" to put their password everywhere!!!
   2. Helpdesks try to educate users to avoid phishing attacks.
2. Applications don't support SAML/SASL or SAML-ECP.
3. OAuth is a better model than long term replayable key.
4. Constrained by the install base.
5. Long term solutions will emerge and be deployed (Moonshot).
6. Clients (IdPs) 
7. As an alternative to storing passwords in O365
   1. password' provided to user + O365 talks to proxy which uses alternative UserDB
   2. user talks to IMAP proxy + proxy verifies auth to Home UserDB + proxies IMAP to O365
   3. currently a PoC with TUDelft
8. Need to do the same with Google Apps

ACTIVITIES GOING FORWARD / NEXT STEPS

1. ...

RESOURCES

• ...Joost's presentation (link TBA)

If slides, websites or other pointers for information are used in the session, please attach them to this page or send them to the secretary for posting.

...