tags:

views:

3220

answers:

5

We are being tasked to hook up SAML 2.0 SSO in our application. We are a Microsoft shop running dot net framework 2.5. I have identified a couple of toolkits and I was wondering if anyone has had any experience with either. They are NetXtreme SAML from SAFABYTE and the ComponentSpace SAML 2.0 toolkit. Candid responses are appreciated!

Thanks in advance --Jim

+1  A: 

No experience with NetXtreme or ComponentSpace, but I do know of the OpenSSO Fedlet for .Net - if you're enabling your app as a SAML 2.0 service provider (SP), it might do the trick.

Official release is in a couple of weeks, but you can grab an early version here. Oh, and it's open source, so you can give the tires a good kick for free...

metadaddy
A: 

I know this is a bit late, but I have not spent time in this forum before. Safewhere (www.safewhere.net) provides an ASP.NET SAML 2.0 toolkit for service providers. It covers more or less what's referred to as SP Lite. It is in widespread use in the public sector of Denmark, where SAML 2.0 is a requirement for federation.

We will be delivering a completely rewritten version of this on top of Windows Identity Foundation, WIF, beginning 2010. (As you may know WIF only includes SAML 2.0 token support and not protocol.)

Just go to the web site or drop me an email should you be interested in either version (nfj insertat safewhere.net)

Niels Flesnted-Jensen
+1  A: 

For the record, none of the ComponentSpace products infringe anyone's copyright. All ComponentSpace products were developed in Australia by Australians and are protected by international copyright laws.

What has happened is that a Vietnamese company called Safabyte aka ComponentForge aka XtraComponents has stolen some our our components including the SAML components as well as components from a number of other companies.

Full details may be found at:

http://cheated.by.safabyte.net/

http://twitter.com/safabytescam

http://blog.safabyte.net/how-to-get-rich-fast-code-monkey-version

The Vietnamese are simply trying to divert attention from their own nefarious deeds.

For further details, please contact ComponentSpace Support.

ComponentSpace Support
A: 

We've had a number of people contact us who were caught in the Safabyte aka ComponentForge aka XtraComponents scam.

The latest incarnation is called ComponentSoft.

However, it's the same Vietnamese national pretending to be based in the US, pretending to be a Microsoft certified partner, and with a list of pretend customers.

Please note that the Vietnamese ComponentSoft has nothing to do with the Australian ComponentSpace other than their theft of our intellectual property.

More details may be found at http://cheated.by.safabyte.net/.

ComponentSpace
A: 

For a SAML 2.0 .net ASP project, SSO Easy provides a turnkey SAML application solution, with complete SAML function out of the box, and built in integration to all required major platforms -- Integrated Windows Authentication / IWA / Kerberos, IIS, Active Directory / ADFS, .net, with Java / J2EE support as well. SSO Easy's SAML product is particularly ideal for Microsoft environments.

This means that you won't have to master SAML, you won't have to code your own application on top of the SAML toolkits, you won't have to support the custom application code, etc.

Longer-term, SSO Easy's SAML product is built to scale and effectively support and manage multiple SAML connections, with varied / complex SAML 2.0 use cases, etc.

http://www.ssoeasy.com/home

For more information: Email [email protected]

rcarroll