News for hackers. Stuff that matters.

A comment on The Difficulties of SAML Single Logout. Parent comment

Re:The Difficulties of SAML Single Logout by rcaught on Wednesday March 17, 2021 @05:59AM (#26488827)
The SP is a walk in the park compared to the IdP.
[ Parent | on HN ]
Re:The Difficulties of SAML Single Logout by rkeene2 on Wednesday March 17, 2021 @08:20AM (#26490040)
To be fair, SAML itself isn't that difficult -- Shibboleth is just not very good.

I implemented a SAML IdP [0] in MUCH less time than it took to configure Shibboleth. The specification for SAML is pretty easy to comprehend.

The implementation is really an experiment, but the configuration and usability is significantly better. Improving the implementation doesn't affect this. In some closed-source forks I've written a production version that's been in use for several years.

[0] https://github.com/rkeene/saml-idp/blob/master/lib/saml/saml...

[ Parent | on HN ]