Proposed By
Vivien Wu
Day
Thursday, December 14
Time
11:30 a.m. - 12:15 p.m.
Location
LK308
Number of Attendees
20
Summary
We'd like to talk about the review of SSO including legacy WebAuth/Weblogin service and the mainstream SSO protocols and the future roadmap.
Notes
Only two sites still using WebLogin - afs.stanford.edu and web.stanford.edu. WebAFS is being retired on Jan 7, 2024.
You used to need a "legacy" two step setup to get through WebLogin, but we have recently removed two step from WebLogin; now WebLogin uses the REFEDS MFA profile, so Duo is required once per session (day).
We still support SAML 2.0, and recently added support for OpenID Connect.
Vivien demos SPDB
Planning to support client credential flow.
Need site(s) like saml.stanford.edu for OAuth and OpenID Connect; also need a roadmap page.
Year
2023
