Changes between Version 11 and Version 12 of Workspaces

Timestamp:

11/11/15 17:34:22 (9 years ago)

Author:

Dieter Van Uytvanck

Comment:

--

Workspaces

@@ -32 +32 @@
  * https://gitorious.org/owncloud/apps/trees/master/user_saml
 
-=== access by web applications ===
+=== user delegation (access by web applications) ===
 
 Challenge is to access it from web services/applications. To do so, a SAML-to-OAuth2 bridge might be needed.
 
-=== non web-based access ===
+More information on this:
+ * https://www.clarin.eu/content/user-delegation
+ * [https://www.clarin.eu/event/2015/centre-meeting workshop on user delegation]
+ * [ticket:636 testing user delegation in CLARIN-D]
+
+=== end-user synchronisation clients ===
 
 some possible solutions:
+
+  * LDAP (restricted to just 1 Identity Provider) > tested successfully for CLARIN-D !OwnCloud. Outstanding issues:
+   * linking with web-based access (match LDAP user ID to SAML attribute like ePPN)
+   * risk that people only use CLARIN IdP as it offers more functionality than their own Identity Provider
+  * SAML integration (client application showing a browser window where a web-based login can take place). [https://www.surf.nl/en/services-and-products/surfdrive/surfdrive.html SURF] uses this system (for 11.000 users at 65 institutes) but is not really happy about the daily functioning. Some early experiments by Dieter seem to confirm this: users often have to login again.
+
+(theoretic solutions that have not been tested and are probably not worth pursuing:)
 
  * Radius (like for eduroam), see e.g. plugin for [http://wiki.gwdg.de/index.php/GWDG_Cloud_Share/EN#Prerequisites_and_limitations powerfolder as used at GWDG] and plugin for [https://github.com/AlessandroLorenzi/owncloud-radius OwnCloud]. Outstanding issues:
    * will it work (as well as eduroam)?
    * is it allowed to use eduroam credentials for this?
- * [https://community.ja.net/groups/moonshot Moonshot] (based on radius but with own client software). Experimental; status needs to be checked with the Moonshot team (which is very communicative: Rhys Smith and John Chapman).
- * LDAP (restricted to just 1 Identity Provider) > tested successfully for CLARIN-D !OwnCloud. Outstanding issues:
-   * linking with web-based access (match LDAP user ID to SAML attribute like ePPN)
-   * risk that people only use CLARIN IdP as it offers more functionality than their own Identity Provider
+ * [https://community.ja.net/groups/moonshot Moonshot] (based on radius but with own client software)
 
 == History and background ==