Using SAML supported app

[RL 'Bob' Morgan]

On Fri, 12 Dec 2008, Mehdi Sarmadi wrote:

>   One of our web applications (a CMS in php) is outsourced. The
> developers claim that their application would support SAML.

You might want to look at Shibboleth, http://shibboleth.internet2.edu/, 
which is a very widely-used open-source SAML-based web signon package.

Another open-source SAML implementation is simpleSAMLphp, 
http://rnd.feide.no/simplesamlphp .

>   In definition, or theory, I read about SAML that it is enough for
> implementing SSO. Is it so in practice?

SAML is indeed a complete web signon protocol.  The Shibboleth package 
includes a full-featured identity provider component.  Shib is also often 
used to extend an existing web signon deployment such as CAS.

  - RL "Bob"