OIDC Deployment Working Group

[Nathan Dors <>]

What do folks on the list think about contributing to a deployment guide for the GÉANT OIDC extension to the Shibboleth IdP, as a focus for early 2019?

On the last few WG calls we reflected on possible work directions for the first part of the year, and folks agreed that a practical near-term need exists for guidance for IdP operators testing, deploying, and using the GÉANT OIDC extension for use by various types of relying parties: everyday web-based apps, but also perhaps single page applications, native mobile and desktop apps, and apps with more limited interfaces like command-line apps. Possibly others too.

Sites testing the OIDC extension have an interest in such a guide, and therefore may be willing to contribute to it, either in the form of content or review and feedback. I know the team here at UWash is interested.

The mechanics of the guidemaking need to be sorted out, and coordinated with Janne, Henri, Shib Dev, et al., and the overall shift in focus needs support from sponsoring bodies like InCommon TAC, CACTI, and other stakeholders... but first, what do you think? Is this the right re-focus?

I know there are a lot of other topics related to OIDC and OAuth that we could cover - indeed, almost too many to cover in a reasonable timeframe - so how about we focus on successful integration of OIDC into IdPs, and then see what makes sense to do next.

-Nathan