Thursday, 20. September 2007
Project Lightbulb aka SAML 2.0 PHP Relying Party
Lightbulb, an Open Web Single Sign-On (OpenSSO) subproject, aims to achieve federated identity for LAMP (Linux, Apache, MySQL, PHP, Python, and Perl) and MARS (MySQL, Apache, Ruby, and the Solaris Operating System). Currently, Lightbulb offers a service provider (SP) written in PHP with Security Assertion Markup Language (SAML) 2.0.
Read
this article on the Sun Developer Network that elaborates on the SP code and describes how to enable Web applications that are also written in PHP with SAML 2.0. The article examines a profile of the SAML SSO protocol, follows its execution through the Lightbulb PHP code, and notes the integration points between Lightbulb and a typical PHP application.
A second
article on Lightbulb explains SAML's circle-of-trust concept and will describe how Lightbulb's single logout process terminates user sessions with all the members of a circle of trust. In the article, Pat Patterson and Marina Sum elaborate how Project Lightbulb has grown, what constitutes a Circle of Trust, and how SLO works. "For good reason, many laud the OpenSSO SAML 2.0 PHP extension as exemplary open-source software. The past few months have seen the formation of a small yet effective community around it—a group of enthusiastic developers and architects who tested and enhanced the software. Even though that extension, unsupported by Sun, is still in an experimental stage, at least one enterprise is using it in production. As SAML 2.0 continues its progress toward becoming the standard federation protocol, more adoptions will likely materialize in the near future," the authors conclude.