4 p.m.
Attendees
Giuseppe, Heather, Scott, Christos, Johan, Ivan, Peter
Regrets
Roland
Notes:
1 - GitHub review
b. Satosa - https://github.com/IdentityPython/SATOSA
Next release will be a major version change to signal people will have to do something
different re: install (see pyOP notes below).
Reference added to new microservices developed by
DAASI: https://github.com/IdentityPython/SATOSA/commit/dc46b6dbd4f9056caed291289a6….
Ivan will also add instructions on how to install and work with some of those packages.
Merged a PR for a different attribute
map: https://github.com/IdentityPython/SATOSA/pull/372
New reflector backend: https://github.com/IdentityPython/SATOSA/pull/374 (mainly for
development purposes). This is similar to a service DAASI developed to communicate with an
LDAP. This basically turns Satosa into an IdP. Maybe time to change the name? Satosa
originally stood for "SAML to SAML". If we continue to develop this kind of
interfaces, it becomes more than a protocol proxy. Need to check in with Roland.
Adding more context to requests: https://github.com/IdentityPython/SATOSA/pull/365. This
is needed for IdP hinting
(see https://github.com/IdentityPython/SATOSA/pull/366 and https://github.com/IdentityPython/SATOSA/pull/220)
A new PR to make cookies configurable: https://github.com/IdentityPython/SATOSA/pull/363.
A new frontend that creates virtual collaboration
groups: https://github.com/IdentityPython/SATOSA/pull/369
c. pySAML2 - https://github.com/IdentityPython/pysaml2
User wants to have a mechanism to load the metadata. We usually use an MDX service. For
non-MDX cases, there was no way to reload the metadata. New PRs introduces a function that
will let us do this.
See https://github.com/IdentityPython/pysaml2/pull/809 and https://github.com/IdentityPython/SATOSA/pull/370.
Suggest that the new endpoints should not be enabled by default. We still want to point
people to MDX as the proper way to do this.
Some discussions happening in Slack which resulted in PRs. Those have not been reviewed
yet.
a. OIDC - https://github.com/IdentityPython (JWTConnect-Python-OidcRP,
JWTConnect-Python-CryptoJWT, etc)
pyOP update - a couple of PRs
(https://github.com/IdentityPython/pyop/pull/32 and https://github.com/IdentityPython/pyop/pull/37)
adding Redis support. Also some changes on how to install with different databases (e.g.,
'pip install pyop[mongo]' or 'pip install pyop[redis]'). This broke Satosa
because of the new package dependencies.
Also, https://github.com/IdentityPython/pyop/pull/38 - adding support for pkce
d. pyFF - https://github.com/IdentityPython/pyFF
No update
e. pyXMLsecurity
Leif had created a PR (https://github.com/IdentityPython/pyXMLSecurity/pull/69), but the
CI tests are failing. It seems related to the PKS interface; the software is not releasing
secrets. Tests are working locally. This adds support for things other than the basic
algorithms. Main goal is to support what is needed by eIDAS. No release yet.
2 - Discussion
Short update: W3C’s FedID Community Group - https://www.w3.org/community/fed-id/
Thanks! Heather