Skip to main content

google-does-saml-but-has-anyone-done-it-plus

I see that Google is allowing SAML for Apps for Domains. Anybody test this yet? I hope to get a chance to soon.

This is interesting because it means that Google is willing to surrender control of authentication for the users of this service. While both Yahoo and Google have released APIs to allow 3rd party applications to use their authentication crendentials, this is the first case (that I know of) of it going the other way.

It will be interesting to see how this affects the growth of SAML. While the big guys involved with SAML have asserted that they will not sue over their patent rights, it is still very one-sided. For example, if you look at the Non-Assertion Covenants they say essentially "we won't sue you over SAML, unless you sue us for anything IP related". So, one of those companies could sue over IP not related to SAML and any counter-suit would enable them to also sue over SAML. Since patents are all about who might win in court, that is a big help.

Currently unrated

Recent Posts

Archive

2021
2019
2018
2017
2016
2015
2014
2013
2012
2011
2010
2009
2008

Categories

Tags

Authors

Feeds

RSS / Atom