Difference between revisions of "I5:Francis Shanahan RP-IdP"

From OSIS Open Source Identity Systems
Jump to: navigation, search
m (1 revision(s))
 
Line 19: Line 19:
 
   |solutionendpoint1 = http://www.francisshanahan.com/cardspace   
 
   |solutionendpoint1 = http://www.francisshanahan.com/cardspace   
 
   |solutionrole2 = Information Card Identity Provider
 
   |solutionrole2 = Information Card Identity Provider
   |solutionendpoint2 = http://www.francisshanahan.com/cardspace   
+
   |solutionendpoint2 = http://www.francisshanahan.com/cardspace
 +
   |solutionrole3 = OpenID Relying Party
 +
  |solutionendpoint3 = http://foolstr.com     
 
}}
 
}}

Latest revision as of 07:35, 19 April 2009

{{#vardefine:DtArticleSortKey|}}

Francis Shanahan RP-IdP

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|Francis Shanahan RP-IdP}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Francis Shanahan RP-IdP|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Solution,from={{#var:page}},namespace=I5|copy]]  [[Special:Call/DT Articles list XML,type=Solution,title={{#var:page}},namespace=I5|as XML]]  edit
}}
{{#if:|Solution |Solution }}   Francis Shanahan RP-IdP
Identifier   bgcolor={{{color}}}}}|FSAsp  
Description   bgcolor={{{color}}}}}|A simple CardSpace Managed Card Generator and Test Harness. It lets you generate a managed card, with whatever claims you'd like and then generate a test harness form for that card.

The card can then be used to obtain claims from a Simple Security Token Service. Lastly, these claims can be consumed and parsed out to complete the end to end process.

This is a publicly available service that demonstrates the end to end flow for Cardspace MANAGED cards and lets you play with the claims, generate your own Cards or build your own Relying Parties against the STS.  

Product Page   bgcolor={{{color}}}}}|http://www.francisshanahan.com/cardspace  
Project or solution logo (if different than Participant logo)   bgcolor={{{color}}}}}|
Latest Version   bgcolor={{{color}}}}}| 
Latest Release Date   bgcolor={{{color}}}}}| 
Installation/Operation Instructions   bgcolor={{{color}}}}}|Go to the page, fill in some claims and click "Make Card" to download a card with those claims.

To test the card, go to the bottom of the page, click "Try It". To authenticate to the IdP just enter any username and password as long as they are the same (e.g. username = "aaa", password = "aaa").

Optional: Test this RP with other Cards: You can edit the claims, specify a different Issuer etc. and then click "Build the Test Form" to test other IdPs. The page will refresh with a new form containing those values. Go to the bottom of that page, hit "Try It" to test with the new values.

Optional: Test this IdP with other RPs: You can use the card at any other RP that supports SAML 1.0. You can also enter RP specific claims and then "Make Card" to generate a card with those claims. The IdP is setup to fill in test values for any claims you include in the card.  

Operated by   bgcolor={{{color}}}}}|Francis Shanahan
Interop Roles   bgcolor={{{color}}}}}|Information Card Relying Party {{ #if: http://www.francisshanahan.com/cardspace |: http://www.francisshanahan.com/cardspace |}}  
  bgcolor={{{color}}}}}|Information Card Identity Provider {{ #if: http://www.francisshanahan.com/cardspace |: http://www.francisshanahan.com/cardspace |}}  
  bgcolor={{{color}}}}}|OpenID Relying Party {{ #if: http://foolstr.com |: http://foolstr.com |}}  
  bgcolor={{{color}}}}}|{{ #if: |: {{{solutionendpoint4}}} |}}  

Click here for help populating this chart. {{ #if: Information Card Relying Party | {{#vardefine:DtArticleSortKey|}}

I5 Information Card Relying Party FeatureTest List

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|Francis Shanahan RP-IdP}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Francis Shanahan RP-IdP|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Information_Card_Relying_Party_FeatureTest_List,from={{#var:page}},namespace=I5|copy]]  [[Special:Call/DT Articles list XML,type=Information_Card_Relying_Party_FeatureTest_List,title={{#var:page}},namespace=I5|as XML]]  edit
}}
{{#if:|Feature Tests for |Feature Tests for }}   Francis Shanahan RP-IdP
{{#if:|Selector Invocation Tests |Selector Invocation Tests }}    
RP Support for HTML Triggers   bgcolor={{{color}}}}}|{{#dpl: |include = {FTResult}:outcome |title = I5:FTR-irp-rptrigger-1-x-Francis Shanahan RP-IdP |noresultsheader = Not Tested }}
RP Support for XHTML Triggers   bgcolor={{{color}}}}}|{{#dpl: |include = {FTResult}:outcome |title = I5:FTR-irp-rptrigger-2-x-Francis Shanahan RP-IdP |noresultsheader = Not Tested }}
RP Support for RP-STS   bgcolor={{{color}}}}}|{{#dpl: |include = {FTResult}:outcome |title = I5:FTR-irp-rptrigger-4-x-Francis Shanahan RP-IdP |noresultsheader = Not Tested }}
{{#if:|Site Information Tests |Site Information Tests }}    
RP Privacy Policy Advertisement   bgcolor={{{color}}}}}|{{#dpl: |include = {FTResult}:outcome |title = I5:FTR-irp-rpsiteinfo-1-x-Francis Shanahan RP-IdP |noresultsheader = Not Tested }}
{{#if:|Card Usage Tests |Card Usage Tests }}    
RP Acceptance of Self-Issued Cards   bgcolor={{{color}}}}}|{{#dpl: |include = {FTResult}:outcome |title = I5:FTR-irp-cardusage-1-x-Francis Shanahan RP-IdP |noresultsheader = Not Tested }}
RP Acceptance of Managed Cards   bgcolor={{{color}}}}}|{{#dpl: |include = {FTResult}:outcome |title = I5:FTR-irp-cardusage-2-x-Francis Shanahan RP-IdP |noresultsheader = Not Tested }}
{{#if:|Token Validation Tests |Token Validation Tests }}    
RP Rejection of Tokens Outside Reasonable Validity Windows   bgcolor={{{color}}}}}|{{#dpl: |include = {FTResult}:outcome |title = I5:FTR-irp-tokenval-1-x-Francis Shanahan RP-IdP |noresultsheader = Not Tested }}
RP Acceptance of Tokens Within Reasonable Validity Windows   bgcolor={{{color}}}}}|{{#dpl: |include = {FTResult}:outcome |title = I5:FTR-irp-tokenval-2-x-Francis Shanahan RP-IdP |noresultsheader = Not Tested }}
RP Acceptance of Unencrypted Tokens   bgcolor={{{color}}}}}|{{#dpl: |include = {FTResult}:outcome |title = I5:FTR-irp-tokenval-3-x-Francis Shanahan RP-IdP |noresultsheader = Not Tested }}
{{#if:|Condition Handling Tests |Condition Handling Tests }}    
RP Behavior when No Identity Selector or Browser Add-On Installed   bgcolor={{{color}}}}}|{{#dpl: |include = {FTResult}:outcome |title = I5:FTR-irp-rpcond-1-x-Francis Shanahan RP-IdP |noresultsheader = Not Tested }}
RP Behavior when Browser Add-On Installed but Identity Selector Not Installed   bgcolor={{{color}}}}}|{{#dpl: |include = {FTResult}:outcome |title = I5:FTR-irp-rpcond-2-x-Francis Shanahan RP-IdP |noresultsheader = Not Tested }}


|

}}

{{ #if: Information Card Identity Provider | {{#vardefine:DtArticleSortKey|}}

I5 Information Card Identity Provider FeatureTest List

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|Francis Shanahan RP-IdP}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Francis Shanahan RP-IdP|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Information_Card_Identity_Provider_FeatureTest_List,from={{#var:page}},namespace=I5|copy]]  [[Special:Call/DT Articles list XML,type=Information_Card_Identity_Provider_FeatureTest_List,title={{#var:page}},namespace=I5|as XML]]  edit
}}
{{#if:|Feature Tests for |Feature Tests for }}   Francis Shanahan RP-IdP
{{#if:|Card Management Tests |Card Management Tests }}    
IdP Creation of .crd Files   bgcolor={{{color}}}}}|{{#dpl: |include = {FTResult}:outcome |title = I5:FTR-iidp-cardmgmt-3-x-Francis Shanahan RP-IdP |noresultsheader = Not Tested }}
{{#if:|Card Usage Tests |Card Usage Tests }}  
IdP Support for Managed Cards backed by Username and Password   bgcolor={{{color}}}}}|{{#dpl: |include = {FTResult}:outcome |title = I5:FTR-iidp-cardusage-2-x-Francis Shanahan RP-IdP |noresultsheader = Not Tested }}
IdP Support for Managed Cards backed by Self-Issued Card   bgcolor={{{color}}}}}|{{#dpl: |include = {FTResult}:outcome |title = I5:FTR-iidp-cardusage-3-x-Francis Shanahan RP-IdP |noresultsheader = Not Tested }}
IdP Population of Display Token Values   bgcolor={{{color}}}}}|{{#dpl: |include = {FTResult}:outcome |title = I5:FTR-iidp-cardusage-6-x-Francis Shanahan RP-IdP |noresultsheader = Not Tested }}
IdP Supports both Equivalent URIs for Cards using SAML 1.0 and 1.1 Tokens   bgcolor={{{color}}}}}|{{#dpl: |include = {FTResult}:outcome |title = I5:FTR-iidp-cardusage-7-x-Francis Shanahan RP-IdP |noresultsheader = Not Tested }}

}}

{{ #if: OpenID Relying Party | {{#vardefine:DtArticleSortKey|}}

I5 OpenID Relying Party FeatureTest List

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|Francis Shanahan RP-IdP}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Francis Shanahan RP-IdP|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=OpenID_Relying_Party_FeatureTest_List,from={{#var:page}},namespace=I5|copy]]  [[Special:Call/DT Articles list XML,type=OpenID_Relying_Party_FeatureTest_List,title={{#var:page}},namespace=I5|as XML]]  edit
}}
{{#if:|Feature Tests for |Feature Tests for }}   Francis Shanahan RP-IdP
{{#if:|OpenID Authentication |OpenID Authentication }}    
OpenID RP Accepts OpenIDs from OpenID 1.1 OPs   bgcolor={{{color}}}}}|{{#dpl: |include = {FTResult}:outcome |title = I5:FTR-orp-auth-1-x-Francis Shanahan RP-IdP |noresultsheader = Not Tested }}
OpenID RP Accepts OpenIDs from OpenID 2.0 OPs   bgcolor={{{color}}}}}|{{#dpl: |include = {FTResult}:outcome |title = I5:FTR-orp-auth-2-x-Francis Shanahan RP-IdP |noresultsheader = Not Tested }}
OpenID RP Accepts i-name-based OpenIDs   bgcolor={{{color}}}}}|{{#dpl: |include = {FTResult}:outcome |title = I5:FTR-orp-auth-3-x-Francis Shanahan RP-IdP |noresultsheader = Not Tested }}
OpenID RP Accepts i-name-based OpenIDs with Unicode characters   bgcolor={{{color}}}}}|{{#dpl: |include = {FTResult}:outcome |title = I5:FTR-orp-auth-4-x-Francis Shanahan RP-IdP |noresultsheader = Not Tested }}
OpenID RP Display i-name that was verified rather than resulting i-number   bgcolor={{{color}}}}}|{{#dpl: |include = {FTResult}:outcome |title = I5:FTR-orp-auth-5-x-Francis Shanahan RP-IdP |noresultsheader = Not Tested }}
OpenID 2.0 Relying Party openID 1.1 delegations via rel links   bgcolor={{{color}}}}}|{{#dpl: |include = {FTResult}:outcome |title = I5:FTR-orp-auth-6-x-Francis Shanahan RP-IdP |noresultsheader = Not Tested }}
OpenID 2.0 Relying Party openID 2.0 delegations via rel links   bgcolor={{{color}}}}}|{{#dpl: |include = {FTResult}:outcome |title = I5:FTR-orp-auth-7-x-Francis Shanahan RP-IdP |noresultsheader = Not Tested }}
OpenID Relying Party Accepts Namespaced openID 1.1 delegations in XRDS documents   bgcolor={{{color}}}}}|{{#dpl: |include = {FTResult}:outcome |title = I5:FTR-orp-auth-7-x-Francis Shanahan RP-IdP |noresultsheader = Not Tested }}
OpenID 2.0 Relying Party support for OpenID 2.0 delegation via XRDS   bgcolor={{{color}}}}}|{{#dpl: |include = {FTResult}:outcome |title = I5:FTR-orp-auth-8-x-Francis Shanahan RP-IdP |noresultsheader = Not Tested }}
OpenID Relying Party uses Claimed ID as its Primary Key   bgcolor={{{color}}}}}|{{#dpl: |include = {FTResult}:outcome |title = I5:FTR-orp-auth-9-x-Francis Shanahan RP-IdP |noresultsheader = Not Tested }}
OpenID RP Accepts HTTPS-based OpenIDs   bgcolor={{{color}}}}}|{{#dpl: |include = {FTResult}:outcome |title = I5:FTR-orp-auth-10-x-Francis Shanahan RP-IdP |noresultsheader = Not Tested }}
OpenID Relying Party Accepts unsolicited positive assertions   bgcolor={{{color}}}}}|{{#dpl: |include = {FTResult}:outcome |title = I5:FTR-orp-auth-B-x-Francis Shanahan RP-IdP |noresultsheader = Not Tested }}
OpenID Relying Party sends Accept request-header when performing discovery   bgcolor={{{color}}}}}|{{#dpl: |include = {FTResult}:outcome |title = I5:FTR-orp-auth-C-x-Francis Shanahan RP-IdP |noresultsheader = Not Tested }}
OpenID Relying Party support for Identifier Select   bgcolor={{{color}}}}}|{{#dpl: |include = {FTResult}:outcome |title = I5:FTR-orp-auth-D-x-Francis Shanahan RP-IdP |noresultsheader = Not Tested }}
{{#if:|Security Tests |Security Tests }}    
OpenID Relying Party has HMAC-SHA256 support   bgcolor={{{color}}}}}|{{#dpl: |include = {FTResult}:outcome |title = I5:FTR-orp-sec-1-x-Francis Shanahan RP-IdP |noresultsheader = Not Tested }}
OpenID Relying Party Publishes a XRDS document for its realm specifying the return to URL   bgcolor={{{color}}}}}|{{#dpl: |include = {FTResult}:outcome |title = I5:FTR-orp-sec-2-x-Francis Shanahan RP-IdP |noresultsheader = Not Tested }}
OpenID Relying Party validates the openid.return_to in the response   bgcolor={{{color}}}}}|{{#dpl: |include = {FTResult}:outcome |title = I5:FTR-orp-sec-3-x-Francis Shanahan RP-IdP |noresultsheader = Not Tested }}
OpenID Relying Party validates positive assertions against Discovered Information   bgcolor={{{color}}}}}|{{#dpl: |include = {FTResult}:outcome |title = I5:FTR-orp-sec-4-x-Francis Shanahan RP-IdP |noresultsheader = Not Tested }}
OpenID Relying Party validates an assertion with the same openid.response_nonce has not already been processed   bgcolor={{{color}}}}}|{{#dpl: |include = {FTResult}:outcome |title = I5:FTR-orp-sec-5-x-Francis Shanahan RP-IdP |noresultsheader = Not Tested }}
OpenID Relying Party validates the 1.1 signature on the assertion is valid and all fields that are required to be signed are signed   bgcolor={{{color}}}}}|{{#dpl: |include = {FTResult}:outcome |title = I5:FTR-orp-sec-6-x-Francis Shanahan RP-IdP |noresultsheader = Not Tested }}
OpenID Relying Party validates the 2.0 signature on the assertion is valid and all fields that are required to be signed are signed   bgcolor={{{color}}}}}|{{#dpl: |include = {FTResult}:outcome |title = I5:FTR-orp-sec-7-x-Francis Shanahan RP-IdP |noresultsheader = Not Tested }}
OpenID Relying Party protects against association poisoning   bgcolor={{{color}}}}}|{{#dpl: |include = {FTResult}:outcome |title = I5:FTR-orp-sec-8-x-Francis Shanahan RP-IdP |noresultsheader = Not Tested }}
{{#if:|Simple Registration |Simple Registration }}    
OpenID RP support for Simple Registration   bgcolor={{{color}}}}}|{{#dpl: |include = {FTResult}:outcome |title = I5:FTR-orp-sreg-1-x-Francis Shanahan RP-IdP |noresultsheader = Not Tested }}
OpenID Relying Party support for account creation via Simple Registration   bgcolor={{{color}}}}}|{{#dpl: |include = {FTResult}:outcome |title = I5:FTR-orp-sreg-2-x-Francis Shanahan RP-IdP |noresultsheader = Not Tested }}
{{#if:|Attribute Exchange |Attribute Exchange }}    
{{#if:|PAPE |PAPE }}    
{{#if:|SSL Certificate Support |SSL Certificate Support }}    
OpenID RP accepts x.509v3 alternate names in certs   bgcolor={{{color}}}}}|{{#dpl: |include = {FTResult}:outcome |title = I5:FTR-orp-ssl-1-x-Francis Shanahan RP-IdP |noresultsheader = Not Tested }}
OpenID Relying Party Verify X.509 certificate associated with Identity Provider   bgcolor={{{color}}}}}|{{#dpl: |include = {FTResult}:outcome |title = I5:FTR-orp-ssl-2-x-Francis Shanahan RP-IdP |noresultsheader = Not Tested }}
OpenID RP accepts x.509v3 certs issued by CA Cert   bgcolor={{{color}}}}}|{{#dpl: |include = {FTResult}:outcome |title = I5:FTR-orp-ssl-3-x-Francis Shanahan RP-IdP |noresultsheader = Not Tested }}
OpenID RP accepts x.509v3 certs issued by Start SSL Class 1   bgcolor={{{color}}}}}|{{#dpl: |include = {FTResult}:outcome |title = I5:FTR-orp-ssl-4-x-Francis Shanahan RP-IdP |noresultsheader = Not Tested }}
OpenID RP accepts x.509v3 certs issued by Start SSL Class 2   bgcolor={{{color}}}}}|{{#dpl: |include = {FTResult}:outcome |title = I5:FTR-orp-ssl-5-x-Francis Shanahan RP-IdP |noresultsheader = Not Tested }}
OpenID RP rejects certs that are not valid for the domain   bgcolor={{{color}}}}}|{{#dpl: |include = {FTResult}:outcome |title = I5:FTR-orp-ssl-6-x-Francis Shanahan RP-IdP |noresultsheader = Not Tested }}
OpenID RP rejects certs that are expired   bgcolor={{{color}}}}}|{{#dpl: |include = {FTResult}:outcome |title = I5:FTR-orp-ssl-7-x-Francis Shanahan RP-IdP |noresultsheader = Not Tested }}


}}


{{ #if: | {{#vardefine:DtArticleSortKey|}}

I5 Feature Test List

Template:I5 Feature Test List | }} {{ #if: Information Card Relying Party | | }} {{ #if: Information Card Identity Provider | | }} {{ #if: OpenID Relying Party | | }} {{ #if: | | }}