GridShib Use of SAML

1
GridShibUse of SAML
2
GridShib SAML Tools

• GridShib SAML Tools v0.1.4 (May 14)
• The SAML Tools issue or request SAML assertions
  and optionally bind these assertions to X.509
  proxy certificates
• Four components
• SAML Assertion Issuer Tool
• SAML Attribute Query Client
• SAML X.509 Binding Tool
• Globus SAML Library
• Basically, a set of standalone client tools

3
GridShib SAML Tools (contd)

• Library dependencies
• cog-jglobus.jar
• opensaml-1.1.jar
• globus-opensaml-1.1.jar
• etc.
• Other dependencies
• Forked version of org.globus.wsrf.impl.security.ut
  il.SAMLUtil

4
Globus SAML Library

• GridShib is using an enhanced OpenSAML 1.1
  (globus-opensaml-1.1.jar)
• Bug fixes
• Patches obtained from Internet2 CVS
• Other bug fixes (documented in bugzilla)
• New features
• SAMLNameIdentifier handlers
• SAMLSubjectAssertion (implementation of
  Subject-based Profiles for SAML V1.1 Assertions)
• Object equivalence
• Unit tests

5
GridShib for GT

• GridShib for GT v0.6.0 TP2 (May 21)
• Consumes pushed SAML assertions bound to proxy
  certificates
• Queries a Shibboleth Attribute Authority for
  attribute assertions
• http//dev.globus.org/wiki/GridShib_for_GT_Design
• Dependencies
• Java WS Core
• Globus SAML Library