Friday, 14 December 2007

Fun with SAML & Google Apps

« Choose wisely | Main | Rearden Commerce achieves 45 SAML Connections! »

Hans Zandbelt, who we had recently reported doing some incredible work leveraging PingFederate as an identity router in a "central federation gateway" model over at SURFnet, has done some amazing new things once again!

Yesterday Hans succesfully connected to Google Apps using SAML 2.0 and PingFederate. By doing so, Hans has enabled his SURFnet federation users to connect directly into Google Apps.

During testing, Hans was able to login to Google Apps (SP initiated) with an account from one of his Microsoft ADFS enabled university IDP's.

As Hans puts it, he succesfully "routed identities" from ADFS and A-Select IDPs to SAML 2.0 SPs through PingFederate.

Note that the current routing was "hard-configured 1-to-1". Hans has now to solve how to couple multiple Google App environments dynamically through his central infrastructure to multiple IDPs instead of doing fixed 1-1 routing. Soon, very soon.