OpenID Federation Registry

János Mohácsi: Develop SAML metadata tools to be able to handle OIDFED

•  Metadata registry nadling and signing tools to handle OIDFED trust-anchor  (https://jagger.heanet.ie ?)
•  Metadata validator → ?? Validator?

OpenID Federation, just like SAML, assumes that an organization or a set of organizations can easily assemble its metadata on a web UI that is usable by relatively non-technical people as well. On this UI, the user can define OIDFed entities, add the necessary metadata fields, text, logo, etc. Just like in the case of SAML, this information is in correspondence with an actual deployment with technical endpoints and key material, which needs to be harmonized with the metadata.

In this Activity

• We specify the “registry” software in the context of OpenID Federation We use a pre-existing GUI (TI wizard from cycle 9) that proved some relevant UX approaches

  • self-checking functionality

  • create an initial mock AI for initial UX development

• We specify an API for the functionality defined, as well as investigate pre-existing initiatives

• We develop a backend and a UX for the OIDFed Registry

• We investigate the integration possibility into the OIDFed testbed

Outcome

• A unified specification of API, possibly multiple initial implementations, UX proof-of-concept

The following parties will use the results of this activity: