Running your own IdP?

Brendan O'Connor openid at ussjoin.com
Fri Oct 27 22:55:32 UTC 2006


Using the PIP that is now part of Heraldry, we were able to use it here 
at Johns Hopkins to create an LDAP-linked IDP. Basically, you just set 
it up and then tell it to check with LDAP before doing what you want to 
protect (we just did account creation, but you might want it for every 
assertion).

PIP's written in great Ruby, so it took about four lines, IIRC, to make 
this change; I'm sure you can figure it out fairly quickly, but if you'd 
like help, or a copy of our changes, you can eMail me offlist.

---Brendan O'Connor

Tommy van der Vorst wrote:
> I'd like to run my own identity provider linked to (maybe) an LDAP or unix
> directory backend. I found a lot of libraries for PHP and Python, but
> neither of them seem to explain how to set up your own identity provider.
> I've found no examples of setting up your own IdP whatsoever. 
> 
> Can someone explain me how I can set up my own IdP? I think this should be
> made easier to allow incorporation of OpenID in existing authentication
> structures.
> 
> Tommy.
> 
> _______________________________________________
> general mailing list
> general at openid.net
> http://openid.net/mailman/listinfo/general



More information about the general mailing list