• Created by Unknown User (schofield), last modified on Nov 20, 2012

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 6 Next »

Office 365 and Rich Client Support in a federated environment, solved by proxies, can this scale to solve other problems

DATE: 20 November 2012

TIME: 15:00-15:45

ROOM: Alternative

TOPIC: Proxies in a federation environment

CONVENER: Joost

SCRIBE: Brook

# of ATTENDEES: Roland vRW, Martin, Klaas, Ajay, Lukas

MAIN ISSUES DISCUSSED 

  1. Clients (humans) are happy when Google stores an additional password to provide the service.
    1. Users are "educated" to put their password everywhere!!!
    2. Helpdesks try to educate users to avoid phishing attacks.
  2. Applications don't support SAML/SASL or SAML-ECP.
  3. OAuth is a better model than long term replayable key.
  4. Constrained by the install base.
  5. Long term solutions will emerge and be deployed (Moonshot).
  6. Clients (IdPs) 
  7. As an alternative to storing passwords in O365
    1. password' provided to user + O365 talks to proxy which uses alternative UserDB
    2. user talks to IMAP proxy + proxy verifies auth to Home UserDB + proxies IMAP to O365
    3. currently a PoC with TUDelft
  8. Need to do the same with Google Apps


ACTIVITIES GOING FORWARD / NEXT STEPS

  1. ...


RESOURCES

  • Joost's presentation (link TBA)

If slides, websites or other pointers for information are used in the session, please attach them to this page or send them to the secretary for posting.

If you don't have an account on the TERENA wiki you can post your notes as a comment to this page - and they'll be incorporated into the notes and then deleted.

  • No labels