Research Shibboleth IdP for SURFaccess-core

[pmeulen]

Research the Shibboleth IdPv5, which now reportedly also includes SP, OpenIDConnect and proxying functionality, in the context of OpenConext-core

Swiss eduID is build using it, with adding plugins for things like MFA (more info: @phavekes )

Shibboleth:

• https://shibboleth.atlassian.net/wiki/spaces/IDP5/overview
• https://codeberg.org/Shibboleth/

Questions, keeping the SURFconext-core (WIP) architecture and technical design principles in mind:

• What can we learn from it?
• What can we (re)use from it?
• How does using it align with architecture and technical design principles
• What are the downsides of using it?

SURFconext-core (WIP) architecture and technical design principles:

• https://confluence.ia.surf.nl/pages/viewpage.action?pageId=287245826&spaceKey=TIINN&title=SURF%2BAccess%2Bnew%2Bcore%2BArchitecture
• https://confluence.ia.surf.nl/spaces/TIINN/pages/287247682/SURFaccess+Technical+Design+Principles+and+Vision

Time: 1 day

Report findings here: https://confluence.ia.surf.nl/spaces/TIINN/pages/287249921/Research+Shibboleth+IdP