Notice: This Wiki is now read only and edits are no longer possible. Please see: https://gitlab.eclipse.org/eclipsefdn/helpdesk/-/wikis/Wiki-shutdown-plan for the plan.
Difference between revisions of "CardSpace Interop"
(→Test #1) |
(→Test #1) |
||
| Line 56: | Line 56: | ||
|-style="background:#ffffff; color:black" | |-style="background:#ffffff; color:black" | ||
|1, 2, 9, 10 | |1, 2, 9, 10 | ||
| − | |1, 5, 6, 8, 10, 16, 21, 24 | + | |1, 5, 6, 8, 10, 16, 17, 21, 24 |
|Working | |Working | ||
| | | | ||
| Line 86: | Line 86: | ||
|-style="background:#ffffff; color:black" | |-style="background:#ffffff; color:black" | ||
| | | | ||
| − | |http:// | + | |http://www.identityblog.com/sts/infocard-demo.ph |
| | | | ||
| | | | ||
| − | |Working | + | |Working Does Not work with cards from https://www.identityblog.com/humanpresent/humanauth.php |
|-style="background:#ffffff; color:black" | |-style="background:#ffffff; color:black" | ||
| | | | ||
| − | | | + | |11, 12 |
| | | | ||
| | | | ||
| − | | | + | |Site does not recognize Higgins IA |
|-style="background:#ffffff; color:black" | |-style="background:#ffffff; color:black" | ||
| | | | ||
| − | |https:// | + | |https://interop.oracle.com/catalyst/jsso |
| | | | ||
| | | | ||
| − | | | + | |Not working, seems to be an Oracle |
| + | |-style="background:#ffffff; color:black" | ||
| + | | | ||
| + | |http://cardspace.demo.pingidentity.com/rp | ||
| + | | | ||
| + | | | ||
| + | |No site to test with at this time | ||
| + | |-style="background:#ffffff; color:black" | ||
| + | | | ||
| + | |http://cardspace.textd.net/ | ||
| + | | | ||
| + | | | ||
| + | |Site does not recognize Higgins IA | ||
|- | |- | ||
|} | |} | ||
Revision as of 16:39, 27 June 2007
In preparation for the Catalyst june 27th Interop demonstration, the following tests (among many others!) were done.
IdPs
- http://wag.bandit-project.org Bandit's Wag Identity Provider
- https://higgins.eclipse.org/TokenService
- https://fugenmisp.federationportal.com (not working) FuGen MISP Test IP
- https://wwww.ibmidentitydemo.com IBM IdP (Add to hosts file:165.228.160.239 www.ibmidentitydemo.com)
- https://lost.cac.washington.edu/icard/ Internet2/Shibboleth Identity Provider
- http://www.identityblog.com/humanpresent/humanauth.php IdentityBlog HumanPresent Identity Provider
- http://sts.labs.live.com/ Windows Live Labs Identity Provider
- https://www.pingidentitylabs.com Ping Identity Provider
- http://jpip.verisignlabs.com VeriSign Personal Identity Provider ("identity" card)
- http://jpip.verisignlabs.com VeriSign Personal Identity Provider ("account" card)
- https://sample.identity.wso2.org:9443/cards-download.html WSO2 Identity Provider (Add to hosts file:192.168.101.201 sample.identity.wso2.org)
- http://xmldap.org/sts/cardmanager XMLDAP Identity Provider
RPs
- https://woof.bandit-project.org Bandit RP Basic
- https://woof.bandit-project.org Bandit RP Advanced
- (not available) BMC RP
- (not available) CA RP
- https://socialphotos.federationportal.com FuGen SocialPhotos RP
- http://server1.interop.onr.com:8080/RelyingPartyDemoApp/index.jsp Higgins Relying Party
- https://www.ibmidentitydemo.com/ IBM Relying Party (Add to hosts file:165.228.160.239 www.ibmidentitydemo.com)
- https://lost.cac.washington.edu/icard/ Internet2 U of Washington
- http://www.identityblog.com/helloworld/infocard-demo.php IdentityBlog: HelloWorld Token Demo
- http://www.identityblog.com/sts/infocard-demo.php IdentityBlog: HumanPresent Relying Party
- http://sts.labs.live.com/register.aspx Windows Live Labs: Live Labs IdP Relying Party (Sign in link is at the top right, must have a passport account)
- http://relay.labs.live.com/download.aspx Windows Live Labs: Live Labs Managed Card Relying Party
- http://131.107.153.200/ Microsoft test site: Age STS Relying Party
- http://cardspace.textd.net/ Microsoft test site: Fabrikam Friends Relying Party using an EV certificate
- http://demo.netmesh.us/ (not active yet) NetMesh Relying Party
- http://pamelaproject.com/jostest PW-jos Joomla Plugin (16)
- http://pamelaproject.com/wptest PW-wp Wordpress Plugin (uses XHTML, changes content based on cameratype claim)
- http://interop.oracle.com/catalyst Oracle Relying Party
- https://www.pingidentitylabs.com Ping RP
- (not available) Sxip Access RP
- http://jpip.verisignlabs.com VeriSign RP
- https://ww2.wso2.org:3443/identity/ WSO2 Relying Party
- https://sample.identity.wso2.org:9443/javarp/ (Active only in the interop room) WSO2 Relying Party 2
- https://xmldap.org/relyingparty/ XMLDAP Relying Party
Test Results
Test #1
Steps
- Get m-card from IdP
- Import into IA
- Sign in to RP
| IdP/STS | RP site | H1(build 60, 2007-06-27)+ HBX(0.8.3.1) | H2 | H3 |
|---|---|---|---|---|
| 1, 2, 9, 10 | 1, 5, 6, 8, 10, 16, 17, 21, 24 | Working | ||
| As above | https://xmldap.org/relyingparty/ | Note 1 | ||
| As above | http://interop.oracle.com/catalyst/ | Note 2 | ||
| 1, 5, 6, 7, 9, 16, 17, 22, 24 | Working | |||
| https://lost.cac.washington.edu/icard/ | Working with Higgins Managed card. Not working with a UW managed card, we hit an issue with an IdP that does not set the AppliesTo: in the card and thus is looking to the IA to do this but it looks like RPPS is not doing this. So we will have cases at the interop where there are AppliesTo: in the card and cases where its not, so we have to be able to pass it on if its there and let the STS do the encryption and the case where its not there is where you will do the encryption. | |||
| http://www.identityblog.com/sts/infocard-demo.ph | Working Does Not work with cards from https://www.identityblog.com/humanpresent/humanauth.php | |||
| 11, 12 | Site does not recognize Higgins IA | |||
| https://interop.oracle.com/catalyst/jsso | Not working, seems to be an Oracle | |||
| http://cardspace.demo.pingidentity.com/rp | No site to test with at this time | |||
| http://cardspace.textd.net/ | Site does not recognize Higgins IA |
Notes:
- import works. sign-in gets error: Error decrypting encrypted token
- import works. sign-in gets error: "Authentication failed. The Oracle SSO authentication system has hit an error. Please try logging in again."
Known bugs
- If HBX displays an alert box "Alert:TypeError:soap.getRPPSService() has no properties", restart Firefox
Reference
- The "hosts" file is located in %SystemRoot%\System32\Drivers\Etc folder on a Windows computer.