Alternative IdP Working Group

["Jones, Mark B" <>]

I understand that there is potentially significant differences between 
Google's public offering and specific GAE instances, but can such gateways be 
limited such that @gmail.com accounts are excluded?  My understanding is that 
Google authentication works for gmail.com as well as any Google Apps 
Education 
and any Google Apps Business account.

> -----Original Message-----
> From: 
> 
>  
> [mailto:]
>  On Behalf Of Tom
> Scavo
> Sent: Tuesday, August 19, 2014 9:08 AM
> To: Jones, Mark B
> Cc: 
> 
> Subject: Re: Meeting Notes and Wiki Access
>
> On Tue, Aug 19, 2014 at 9:31 AM, Jones, Mark B
> <>
>  wrote:
> > On the strategies and assessments page
> > https://urldefense.proofpoint.com/v1/url?u=https://spaces.internet2.ed
> >
> u/display/altidp/Alternative%2BIdP%2BStrategies%2Band%2BAssessment%2
> BC
> >
> riteria&k=yYSsEqip9%2FcIjLHUhVwIqA%3D%3D%0A&r=o50KCUcRVN10tgtgly
> NVFw2k
> >
> mizyPIIFTSGui%2BBSZ5A%3D%0A&m=j1uuyPf1xrcmc8VwRTij70jqsU0TpIg1V
> EygoZBK
> >
> HmU%3D%0A&s=4bbcb997a0ef8f313bb5a47a3d3d55a26c55b607540be561b9
> 0e225b02
> > 3e21a4 I have a question about the description for 'Google Apps
> > Gateway'.
> >
> > The description reads:  " An OIDC-to-SAML gateway, often operated by a
> > third party, for participants that have a Google Apps account (such as
> > GA for
> > Education) "
> >
> > Don't these allow users with any flavor of Google account (including
> > @gmail.com accounts) to authenticate, not just users with GAE accounts?
>
> Yes, but notice that I also added Identity as-a-Service with Google as an
> option. I think it's useful to make a distinction depending on whether 
> Google
> manages the passwords or the campus manages the passwords. See:
> https://urldefense.proofpoint.com/v1/url?u=https://spaces.internet2.edu/
> x/FgrkAg&k=yYSsEqip9%2FcIjLHUhVwIqA%3D%3D%0A&r=o50KCUcRVN10tgt
> glyNVFw2kmizyPIIFTSGui%2BBSZ5A%3D%0A&m=j1uuyPf1xrcmc8VwRTij70jq
> sU0TpIg1VEygoZBKHmU%3D%0A&s=b5ec4467b0cb98a83d049ce3b5798848e7
> 7da646744d3dba67213a8f810a5f25
>
> Tom

Attachment: smime.p7s
Description: S/MIME cryptographic signature