note regarding OGF19

This is a brief update regarding SAML-related news from the 19th Open
Grid Forum (OGF19) last week:

http://www.ogf.org/OGF19/events_ogf19.php

- The "OGF Federated Identity and Grids Workshop" discussed issues
associated with the leveraging of campus identity management
infrastructure (typically Shibboleth).  In Europe, EGEE is looking
closely at SWITCH, while TeraGrid in the US is deploying a testbed
based on GridShib.

http://grid.ncsa.uiuc.edu/events/ggf18-shib-bof/060911_witzig_GGF18.pdf
http://www.teragridforum.org/mediawiki/index.php?title=Authentication_and_Authorization

- VOMS is implementing the "SAML V2.0 Deployment Profiles for X.509
Subjects".  The goal is to retrieve attributes from a SAML AA and
repackage them as X.509 attribute certificates (on which VOMS is
based).

http://littleblue.cnaf.infn.it/twiki/bin/view/VOMS/WebHome

- The OGF AuthZ WG has tentatively agreed to consider an "X.509
Binding for SAML Assertions," that is, binding of SAML assertions to a
non-critical X.509v3 certificate extension.

Tom Scavo
NCSA/University of Illinois