On Fri, 12 Dec 2008, Mehdi Sarmadi wrote:

  One of our web applications (a CMS in php) is outsourced. The
developers claim that their application would support SAML.

You might want to look at Shibboleth, http://shibboleth.internet2.edu/, which is a very widely-used open-source SAML-based web signon package.

Another open-source SAML implementation is simpleSAMLphp, http://rnd.feide.no/simplesamlphp .

  In definition, or theory, I read about SAML that it is enough for
implementing SSO. Is it so in practice?

SAML is indeed a complete web signon protocol. The Shibboleth package includes a full-featured identity provider component. Shib is also often used to extend an existing web signon deployment such as CAS.

 - RL "Bob"
_______________________________________________
Yale CAS mailing list
[email protected]
http://tp.its.yale.edu/mailman/listinfo/cas

Reply via email to