You can generate your own SSL certificates, but they won't be signed by any
authority.  So if the user is logging in to your web application and you're
using a self-signed certificate they will get a message warning them.  It
won't stop them, but your users may not feel comfortable authenticating to a
service that's not secured with a certificate authority signature.

Secondly, you'll need an SSL certificate to use between your web application
and Google (to encrypt/decrypt the SAML request/response).  This certificate
does NOT need to be signed by a certificate authority if you don't want it
to be since it's just between you and Google.

Google has instructions for generating certificates here:

http://code.google.com/support/bin/answer.py?answer=71864&topic=12142

-Ryan

On Nov 15, 2007 9:04 AM, Alon <[EMAIL PROTECTED]> wrote:

>
> Thanks for your answer, Ryan.
>
> What about the SSL certificate? Do I need https in my site?
>
> Alon
>
>
>
> On Nov 14, 8:15 pm, "Ryan Shelley" <[EMAIL PROTECTED]> wrote:
> > Are you talking about the SAML authentication piece?  There's sample
> code
> > here:
> >
> > http://code.google.com/apis/apps/sso/saml_reference_implementation.html
> >
> > However, if you're talking about Provisioning (account creation) there's
> > sample code here:
> >
> > http://code.google.com/apis/apps/gdata_provisioning_api_v2.0_referenc...
> >
> > -Ryan
> >
> > On Nov 14, 2007 6:45 AM, Alon <[EMAIL PROTECTED]> wrote:
> >
> >
> >
> >
> >
> > > Hello, I have just got the free partner edition and have many
> > > questions:
> >
> > > 1. Where can I find an example for "Sign Up" form code?
> > > 2. How can I limit the username to be at least 6 chars?
> > > 3. Do I have to pay for SSL certificate or there is a free solution?
> >
> > > Thanks,
> > > Alon- Hide quoted text -
> >
> > - Show quoted text -
> >
>

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"Google Apps APIs" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/google-apps-apis?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to