Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  • Translating between SAML and OIDC

Audit trail

"Proxy Wizard"

  • Ability to configure entities preloaded into the proxy based on entity federation metadata

Proxy Administration

  • Local accounts and roles? Or a single admin user?

Federation Management

(Primary

...

) Entity management

  • Configuration of SAML IdP
  • Configuration of SAML SP
  • Configuration of OIDC OP
  • Configuration of OIDC RP
  • Generic config management
    • Export/import of config items/entities
    • Copy/delete (Copy copy as poor man's versioning, should it also work on groups of items)
    • Editing of entities in the GUI (common configuration items, protocol specific features)
    • Raw config editGUI edit of common configuration items
    • Apply config
    • Git config save
    • Generic post processor for configs (could be used to implement (config and Git push)
  • Management of individual IDPs/Authorisation Servers/OPs and SPs/RPs/clients within the proxy (naming - "client" is more an Oauth2 term and too overloaded)
  • Config checks (could also be one of post-processors)
  • Versioning
  • Rollback from Git (Git config restore)
  • Topology graph
  • Management of multiple proxy instances
  • Management of proxy (related) data for individual entities
  • Entity lifecycle (express a states in the gui? - what is the consequence of being in a certains state?)
    • Draft
    • Test
    • Production
    • Support for parked entities/configs
    • Logically deleted

Other

  • GUI for internal admin of the proxy (for key internal settings apart from managed services' configs)
  • Federation/eduGAN support
  • Additional support for federated identity management - what specifically?
  • API to access/edit service configuration/history???
  • Validation of encryption and signatures of entities and their messages
  • Enforcement of authentication and authorization policies - defined locally or by IdPs?
  • Integration with MFA by the proxy
  • Reporting and analytics
    • Statistics
    • Issues
    • Events/logs

Managing metadata exchange

...