I2 Identity Selector Profiles
From OSIS Open Source Identity Systems
NOTE: In addition to updating the table, we finally got rid of the hideous H1, H2, H3 labels! -Paul
Table of Identity Selector profiles.
Each profile should specify:
- a page with more information about the profile, e.g. protocol version, feature sets, etc.
- testing procedures to determine profile success of failure
- possible failures and expected handling
Each participant can fill in a column with some indication of support for the profile, e.g. yes, no, link to more information.
Interop Related
This table represents what will be tested at Barcelona
Legend: Yes = supported; No = not supported; ? = unknown; tbd = support possible near term; some = some features supported
| Profile | CardSpace V1 | CardSpace V.Next | openinfocard | Higgins Web-based | Higgins Client-based (aka DigitalMe) | Higgins Eclipse-based |
|---|---|---|---|---|---|---|
| OS present in Barcelona | Vista | OSX | SUSE, OSX | OSX, Vista, Redhat | ||
| Browser present in Barcelona | IE7 | IE7 | Firefox | Firefox | Firefox | IE7, Firefox |
| Protocol Support for Relying Party STS | yes | yes | ? | yes | tbd | yes |
| Import and export cards | yes | yes | import | yes | yes | yes |
| Self-issued cards | yes | yes | yes | yes | yes | yes |
| Managed cards backed by self-issued cards | yes | yes | no | planned for 1.0 | yes | yes |
| Managed cards backed by X.509 certificate | yes | yes | no | planned for 1.0 | yes | planned for 1.0 |
| Managed cards backed by password | yes | yes | yes | yes | yes | yes |
| Managed cards backed by Kerberos | yes | yes | no | planned for 1.0 | yes | planned for 1.0 |
| Display token support | yes | yes | yes | planned for 1.0 | yes | yes |
| EV certificate support | yes | yes | display RP logo | planned for 1.0 | some (logotype not displayed) | planned for 1.0 |
| No-SSL support | no | yes | pending IP review | tbd | planned for 1.0 | |
| I-Card Selector Invocation | yes to all? | yes to all? | yes | yes |
Other Interoperability
This table contains interoperability concerns that will not be addressed at Barcelona. They are recorded here for future consideration.
| Profile | CardSpace V1 | CardSpace V.Next | openinfocard | Higgins web-based | Higgins client-based (aka DigitalMe) | Higgins eclipse-based |
|---|---|---|---|---|---|---|
| User Interactions | yes | yes | no | yes | yes | |
| Platform and packaging support | yes | yes | yes | yes | yes |
Capabilities, Features, and Best Practices
This table reflects other issues that really aren't about interoperability. Some of them are worthy of discussion.
| Profile | CardSpace V1 | CardSpace V.Next | openinfocard | Higgins Web-based | Higgins Client-based | Higgins Eclipse-based |
|---|---|---|---|---|---|---|
| User Interactions | some | some | ||||
| Display privacy policies | yes | yes | no | yes | tbd | |
| I2 IA Upgrades | yes | yes | yes | |||
| Packaging | yes | yes |
