RE: [security-services] SAML JSR

Title: RE: [security-services] SAML JSR

Krishna,

Glad to hear the SAML JSR process has begun. 

1) When do you think we will proceed with this work? 

2) What is timeframe?

3) Any plans to produce a Java Extension package for 

   SAML, and who are the reference implementation providers?

   Netegrity?

4) Any thoughts about its relationship w/JAAS? JMS? 

thanks,

Zahid

-----Original Message-----

From: Krishna Sankar [mailto:]

Sent: Tuesday, October 30, 2001 8:50 PM

To: 

Subject: [security-services] SAML JSR

Hi all,

        Looks like the voting on the SAML JSR is over and has been approved. The

URL is http://www.jcp.org/jsr/detail/155.jsp. The next big work is to form

an expert group. The schedule is very tight and so we need to move ASAP.

        Would appreciate if you could nominate the most passionate and Java

API/security experts from your organization for the expert group. The site

has a link to the "I want to join this Expert Group".

        Our goals are as follows:

        1.      Elegant and easy to use API so that developers can adopt/adapt the SAML

and assertions principles into their programs

        2.      APIs based on the current Java Security model and concepts (This could

be a big challenge)

        3.      Assertion exchange models, choreography and interactions (based on

current security protocols plus JAXM and JAX-RPC)

        4.      *Very important* -> Use cases to validate 1 thru 3 above

        We also need to develop a RI and possibly a TCK.

        Please let me know your ideas, suggestions and wisdom as well.

cheers

----------------------------------------------------------------

To subscribe or unsubscribe from this elist use the subscription

manager: <http://lists.oasis-open.org/ob/adm.pl>