There are some cheap 'low assurance' certificates out there which satisfy browser checks but do little in the way of establishing the identity of the entity/ies behind the transaction. Actually these are satisfactory in many instances and the next best thing (some would argue better in terms of open infrastructure) is probably CAcert.org
Sam On 11/16/07, Ryan Shelley <[EMAIL PROTECTED]> wrote: > You can generate your own SSL certificates, but they won't be signed by any > authority. So if the user is logging in to your web application and you're > using a self-signed certificate they will get a message warning them. It > won't stop them, but your users may not feel comfortable authenticating to a > service that's not secured with a certificate authority signature. > > Secondly, you'll need an SSL certificate to use between your web application > and Google (to encrypt/decrypt the SAML request/response). This certificate > does NOT need to be signed by a certificate authority if you don't want it > to be since it's just between you and Google. > > Google has instructions for generating certificates here: > > http://code.google.com/support/bin/answer.py?answer=71864&topic=12142 > > -Ryan > > > On Nov 15, 2007 9:04 AM, Alon <[EMAIL PROTECTED]> wrote: > > > > Thanks for your answer, Ryan. > > > > What about the SSL certificate? Do I need https in my site? > > > > Alon > > > > > > > > > > On Nov 14, 8:15 pm, "Ryan Shelley" < [EMAIL PROTECTED]> wrote: > > > Are you talking about the SAML authentication piece? There's sample > code > > > here: > > > > > > > http://code.google.com/apis/apps/sso/saml_reference_implementation.html > > > > > > However, if you're talking about Provisioning (account creation) there's > > > sample code here: > > > > > > > http://code.google.com/apis/apps/gdata_provisioning_api_v2.0_referenc... > > > > > > -Ryan > > > > > > > > On Nov 14, 2007 6:45 AM, Alon <[EMAIL PROTECTED]> wrote: > > > > > > > > > > > > > > > > > > > Hello, I have just got the free partner edition and have many > > > > questions: > > > > > > > 1. Where can I find an example for "Sign Up" form code? > > > > 2. How can I limit the username to be at least 6 chars? > > > > 3. Do I have to pay for SSL certificate or there is a free solution? > > > > > > > Thanks, > > > > Alon- Hide quoted text - > > > > > > - Show quoted text - > > > > > > > > > > > > > --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Google Apps APIs" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [EMAIL PROTECTED] For more options, visit this group at http://groups.google.com/group/google-apps-apis?hl=en -~----------~----~----~----~------~----~------~--~---
