CardSpace, Java, and Single Sign On

Security Briefs

Syndication

At my WCF Security talk at TechEd, I showed an example of a WCF service that accepts IssuedToken credentials (effectively a SAML token issued by a security token service). The easiest way to demo this today is using Windows CardSpace (or WCS, formerly known as InfoCard), so I ended up talking a bit about WCS. And after my talk, the vast majority of questions were about WCS, which is great!

One question that came up that morning (and always comes up) was about cross-platform support for CardSpace. Will the Mac have an identity selector? Will Linux? Can I write a relying party in Java? Can I do single sign on with InfoCard, or must I select a card for each application I visit?

The last two questions are answered by a demo that Ping Identity is giving this week at Catalyst 2006 (via Kim). I've not seen any concrete statements about Mac and Linux identity selectors yet though.

.

 


Posted Jun 14 2006, 07:01 PM by keith-brown
Filed under: ,

Comments

Gerald Beuchelt wrote re: CardSpace, Java, and Single Sign On
on 06-16-2006 5:59 AM
Hi Keith -

Chuck wrote a simple Java InfoCard selector, see here:

http://xmldap.blogspot.com/2006/03/simple-java-based-relying-party.html

He also recently posted a selector for Firefox:

http://xmldap.org/xmldap.xpi

I am currently looking into the requirements for a STSs as well, so there might be something in this area coming - would you be available to chat about this?



Keith Brown wrote re: CardSpace, Java, and Single Sign On
on 06-16-2006 6:45 AM
Sure - ping me via my contact page (http://pluralsight.com/blogs/keith/contact.aspx) and we'll hook up.
. wrote Open-Source Identity Selector
on 06-16-2006 9:47 PM
An initiative is trying to get together at http://osis.netmesh.org/ for Linux, Mac and Mobile.
James wrote re: CardSpace, Java, and Single Sign On
on 04-10-2007 12:45 PM
The question of whether one can write a selector in Java wasn't answered by pointing them to a closed source implementation. A better answer is you can download the source for a Java based RP here...

Add a Comment

(required)  
(optional)
(required)  
Remember Me?