1. Overview and Development Plans
Shibboleth Roadmap
Overview and Development Plans
4 December 2018
Steve Carmody
Brown University

2. Topics V1.2 (spring 2004) V1.3 (late summer 2004) InCommon startup
Projects Currently Underway
Possible Future Efforts
12/4/2018

3. V1.2 (spring 2004) WILL interoperate with previous versions
Increased configuration flexibility for targets in a complex multi-federation world
Can be configured for membership in multiple Federations
"application" is a unit of session management and attribute caching
Service Provider IDs will determine Attribute Release.
Increased configuration flexibility for origins
Can configure global values for many config values
Can override any of these on a RelyingParty basis
12/4/2018

4. V1.2 (spring 2004) Improved Security Improved Performance
The HS now validates the providerId and SHIRE accompanying the request
The AA now validates service provider credentials against federation metadata.
Several different file formats are supported for holding credentials
Improved Performance
For both origins and targets
More to come in v1.3
12/4/2018

5. V1.2 (spring 2004)
The Shib target will now run on BOTH the apache-2 web server and the previously supported apache 1.3.x
Vhost support on the target will now work as expected
The target will support "lazy session establishment".
The Attribute Authority will contain significantly improved support for use of an SQL-based data repository
Support for Audit logging
Improved packaging, easier to install
Configuration Recommendations for improved performance
12/4/2018

6. POSSIBILITIES for V1.3 (late summer 2004)
Complete multi-federation support in the origin side code
Improved XML signing performance
Extend ARP engine functionality (ARPs for groups)
Attribute PUSH
Extended Access Control Functionality (XACML)
Improve User Experience (WAYF)
12/4/2018

7. InCommon startup
Currently 10 campuses and targets (vendors) are testing procedures and policies
Should be open for business by mid-summer
12/4/2018

8. Projects Currently Underway
Java target implementation
Improved W2003 Shib target packaging and functionality
Web based GUI for ARP management
GRID + Shib Integration
Use of Shib by LionShare, Sakai, Fedora
Investigation of H.323 use of Shib
Middleware-enabled Collaboration Tools (mailing list software, WiKi’s, Blogs, Content Mgmt (ZOPE) …)
Microsoft…
12/4/2018

9. Possible Future Efforts
Use with portals, and 3-tier situations
Exploring the tradeoffs between privacy and target manageability
GUI for target side policy management
Support for portions of SAML 2
Integration with lightweight VOs
Coordinated efforts with the UK
12/4/2018

10. 12/4/2018