Software Features
A. Globus Toolkit Features
- Query for attributes from a Shib AA
- Process attribute assertions obtained from a Shib AA
- Process authentication assertions embedded in X.509 certificates presented by clients
- Process attribute assertions embedded in X.509 certificates presented by clients
- Process
AuthenticationStatement/@AuthenticationMethod
attribute in authentication assertions - Consume !IdP metadata
A. Shibboleth IdP Features - Produce and consume
X509SubjectName
identifiers - Produce and consume
emailAddress
identifiers - Produce metadata (provisioned from the underlying config)
- Implement passive authentication request protocol handler
A. MyProxy Server Features - Produce
emailAddress
name identifiers - Produce X.509 certificates with embedded authentication assertions
- Consume authentication assertions (contained in SAML
Response
elements) pushed by clients - Consume !IdP metadata
- Produce metadata (provisioned from the underlying config)
- Produce X.509 certificates with embedded attribute assertions
- Consume Grid SP metadata
- Produce metadata (as a by-product of consuming Grid SP metadata)
A. MyProxy Client Features - Support Shib Authentication Request Profile
- Authenticate with SAML
Response
via MyProxy Protocol