Hi Scott, I personally would love to see some sense of SAML support in Shiro, and I'd be happy to help with this if I can.
Based on your comments, I'm assuming the SAML support you're talking about is based on implementing what SAML calls a 'Relying Party' or perhaps a 'Service Provider' via Shiro? i.e. something that communicates with an Authentication Authority and is a consumer of Authentication Assertions? If so, what type of SAML Profiles would you want to support? Just the Web Browser SSO one? Or more? Also, the SAML spec requires supporting XML Digital Signature and XML Encryption (OpenSSO supports these). These are typically used in conjunction with SOAP messages as well (which implies calling SOAP endpoints). And then you'd have to worry about WS-Security, etc. I guess I'm saying you can go down quite far into the SAML rabbit hole if you wanted to :) What would you want to target? My opinion is that I think that any such support should probably be part of Shiro core and then used by the Grails plugin if possible. Regards, -- Les Hazlewood Founder, Katasoft, Inc. Application Security Products & Professional Apache Shiro Support and Training: http://www.katasoft.com On Wed, Dec 1, 2010 at 7:14 AM, Scott Ryan <[email protected]> wrote: > WE are looking at implementing SAML authentication in our shiro > implementation inside a Grails application. Has anyone implemented SAML 2 > using Shiro? We would be more than happy to contribute the code back to the > community or Shiro team if that would be of help. We are using Open SAML to > implement the solution but need some direction on how to best integrate with > Shiro and especially within the Grails plugin but the plugin is focused on > Shiro. My assumption is that we would need to create a new SAML Realm > extending the Authentication Realm. I am not clear on what other parts of > the puzzle we need to implement. Do we need to create a new credential > matcher implementation or token or both? Is there some documentation that is > available we should be reviewing? Any help would be appreciated. Also what > would be the best vehicle to contribute this code back through Shiro Grails > as a plugin? > > If anyone has something already or wants to collaborate on this let us know > > Thanks > > Scott Ryan
