public marks

PUBLIC MARKS from nhoizey with tags sso & sécurité

April 2008

Questions & réponses sur la fédération du CRU [Comité Réseau des Universités]

Shibboleth ne remplace pas CAS. Shibboleth et CAS ont deux fonctions différentes : CAS offre le SSO pour les applications déployées dans le périmêtre (ou système d'information) d'un établissement, Shibboleth offre le SSO (et la diffusion d'attribut

Getting profile information rather than just authentication

CAS is a Web based local single signon. Shibboleth is a cross-university authentication and attribute system that doesn't have its own local signon. In order to use Shibboleth, you have to first have a local system like CAS.

October 2007

NTLM HTTP Authentication is insecure by design

This write-up discusses a problem inherent to the situation of a connection-oriented authentication - authorization protocol (e.g. NTLM authentication) used with a proxy server that shares TCP connections among several clients

The NTLM Authentication Protocol

This article seeks to describe NTLM at an intermediate to advanced level of detail, suitable as a reference for implementors.

September 2006

Shibboleth Project - Internet2 Middleware

by 3 others (via)
Shibboleth is standards-based, open source middleware software which provides Web Single SignOn (SSO) across or within organizational boundaries. It allows sites to make informed authorization decisions for individual access of protected online resources in a privacy-preserving manner.