# Interoperabilitás_mátrix

# Interoperabilitás mátrix

## Tesztelt szoftverek

* Shibboleth 2.0 IdP
	* metadata: [papigw-shibboleth2-idp.xml](https://s3.public.doc.einfra.hu/public-doc-einfra/uploads/files/2025-03-Mar/papigw-shibboleth2-idp.xml)
	* telepítési útvonal: /usr/local/shibboleth-idp-2.0.0
	* protokollok: SAML1.1, Shibboleth1.3, SAML2.0
* Shibboleth 2.0 SP
	* metadata:  [papigw-shibboleth2-sp.xml](https://s3.public.doc.einfra.hu/public-doc-einfra/uploads/files/2025-03-Mar/papigw-shibboleth2-sp.xml)
	* telepítés Debian csomagból, konfiguráció /etc/shibboleth/ alatt
	* protokollok: SAML1.1, Shibboleth1.3, SAML2.0
* OpenSSO/FAM 8.0 CVS build - IdP
	* metadata: [maszat-opensso-idp.xml](https://s3.public.doc.einfra.hu/public-doc-einfra/uploads/files/2025-03-Mar/maszat-opensso-idp.xml)
	* host: maszat.sch.bme.hu
	* protokollok: SAML2.0
* simpleSAMLphp (?) - SP
	* entityID: [https://papigw.aai.niif.hu/simplesaml](https://papigw.aai.niif.hu/simplesaml)
	* protokollok: Shibboleth1.3, SAML2.0

## Tesztelt protokollok és bindingok

* SAML2.0 AuthnRequest/AuthnResponse protokoll (Web browser SSO profil)
	* HTTP-GET / HTTP-POST binding
	* HTTP-GET / HTTP-Artifact binding
* SAML2.0 AttributeQuery protokoll
* SAML2.0 Single Logout

## SAML2.0 Interoperabilitás mátrix

Jelmagyarázat:

* Single Sign on - AuthnRequest/Response (Attribute push-sal együtt)
* HTTP-POST - SAML2.0 HTTP-Post binding
* HTTP-Artifact - SAML2.0 HTTP-Artifact binding
* Attribute query - SAML2.0 Attribute Query protocol
* Signing / encryption - az Assertion aláírása, aláírt és titkosított Assertion feldolgozása
* Metadata management - mennyire egyszerű megoldani hogy az IdP és az SP ismerje egymást

A zöld-del jelölt funkciók tökéletesen működnek, a narancssárgák nem triviálisan, de működésre bírhatók (ilyenkor mindig van megjegyzés is hozzájuk), a pirossal jelölt funkciók nem működtek. Az áthúzott funkciókat nem implementálja az adott szoftverpáros.


Sure, here's the HTML conversion of the provided MediaWiki table:


<table border="1" cellpadding="5" cellspacing="0">
    <tr>
        <th></th>
        <th>Shibboleth2 SP</th>
        <th>OpenSSO SP</th>
        <th>simpleSAMLphp SP</th>
    </tr>
    <tr>
        <th>Shibboleth2 IdP</th>
        <td>
            <table>
                <tr>
                    <th><a href="AAIInterop-Shib2Shib2">Shib2-Shib2</a></th>
                </tr>
                <tr>
                    <td style="background:green;">Single Sign on</td>
                </tr>
                <tr>
                    <td style="background:green;">HTTP-POST</td>
                </tr>
                <tr>
                    <td style="background:green;">HTTP-Artifact</td>
                </tr>
                <tr>
                    <td style="background:green;">Attribute query</td>
                </tr>
                <tr>
                    <td style="background:green;">Signing / encryption</td>
                </tr>
                <tr>
                    <td style="background:green;">Metadata management</td>
                </tr>
            </table>
        </td>
        <td>
            <table>
                <tr>
                    <th><a href="AAIInterop-Shib2OpenSSO">Shib2-OpenSSO</a></th>
                </tr>
                <tr>
                    <td>Single Sign on</td>
                </tr>
                <tr>
                    <td>HTTP-POST</td>
                </tr>
                <tr>
                    <td>HTTP-Artifact</td>
                </tr>
                <tr>
                    <td>Attribute query</td>
                </tr>
                <tr>
                    <td>Signing / encryption</td>
                </tr>
                <tr>
                    <td>Metadata management</td>
                </tr>
            </table>
        </td>
        <td>
            <table>
                <tr>
                    <th><a href="AAIInterop-Shib2SimpleSAMLphp">Shib2-SimpleSAMLphp</a></th>
                </tr>
                <tr>
                    <td style="background:green;">Single Sign on</td>
                </tr>
                <tr>
                    <td style="background:green;">HTTP-POST</td>
                </tr>
                <tr>
                    <td style="text-decoration:line-through;">HTTP-Artifact</td>
                </tr>
                <tr>
                    <td style="text-decoration:line-through;">Attribute query</td>
                </tr>
                <tr>
                    <td style="background:orange;">Signing / encryption</td>
                </tr>
                <tr>
                    <td style="background:green;">Metadata management</td>
                </tr>
            </table>
        </td>
    </tr>
    <tr>
        <th>OpenSSO IdP</th>
        <td>
            <table>
                <tr>
                    <th><a href="AAIInterop-OpenSSOShib2">OpenSSO-Shib2</a></th>
                </tr>
                <tr>
                    <td style="background:green;">Single Sign on</td>
                </tr>
                <tr>
                    <td style="background:green;">HTTP-POST</td>
                </tr>
                <tr>
                    <td>HTTP-Artifact</td>
                </tr>
                <tr>
                    <td style="text-decoration:line-through;">Attribute query</td>
                </tr>
                <tr>
                    <td>Signing / encryption</td>
                </tr>
                <tr>
                    <td style="background:orange;">Metadata management</td>
                </tr>
            </table>
        </td>
        <td>
            <table>
                <tr>
                    <th>OpenSSO-OpenSSO</th>
                </tr>
                <tr>
                    <td>Single Sign on</td>
                </tr>
                <tr>
                    <td>HTTP-POST</td>
                </tr>
                <tr>
                    <td>HTTP-Artifact</td>
                </tr>
                <tr>
                    <td>Attribute query</td>
                </tr>
                <tr>
                    <td>Signing / encryption</td>
                </tr>
                <tr>
                    <td>Metadata management</td>
                </tr>
            </table>
        </td>
        <td>
            <table>
                <tr>
                    <th>OpenSSO-simpleSAML</th>
                </tr>
                <tr>
                    <td>Single Sign on</td>
                </tr>
                <tr>
                    <td>HTTP-POST</td>
                </tr>
                <tr>
                    <td>HTTP-Artifact</td>
                </tr>
                <tr>
                    <td>Attribute query</td>
                </tr>
                <tr>
                    <td>Signing / encryption</td>
                </tr>
                <tr>
                    <td>Metadata management</td>
                </tr>
            </table>
        </td>
    </tr>
    <tr>
        <th>simpleSAMLphp IdP</th>
        <td>
            <table>
                <tr>
                    <th>simpleSAML-Shib2</th>
                </tr>
                <tr>
                    <td>Single Sign on</td>
                </tr>
                <tr>
                    <td>HTTP-POST</td>
                </tr>
                <tr>
                    <td>HTTP-Artifact</td>
                </tr>
                <tr>
                    <td>Attribute query</td>
                </tr>
                <tr>
                    <td>Signing / encryption</td>
                </tr>
                <tr>
                    <td>Metadata management</td>
                </tr>
            </table>
        </td>
        <td>
            <table>
                <tr>
                    <th>simpleSAML-OpenSSO</th>
                </tr>
                <tr>
                    <td>Single Sign on</td>
                </tr>
                <tr>
                    <td>HTTP-POST</td>
                </tr>
                <tr>
                    <td>HTTP-Artifact</td>
                </tr>
                <tr>
                    <td>Attribute query</td>
                </tr>
                <tr>
                    <td>Signing / encryption</td>
                </tr>
                <tr>
                    <td>Metadata management</td>
                </tr>
            </table>
        </td>
        <td>
            <table>
                <tr>
                    <th>simpleSAML-simpleSAML</th>
                </tr>
                <tr>
                    <td>Single Sign on</td>
                </tr>
                <tr>
                    <td>HTTP-POST</td>
                </tr>
                <tr>
                    <td>HTTP-Artifact</td>
                </tr>
                <tr>
                    <td>Attribute query</td>
                </tr>
                <tr>
                    <td>Signing / encryption</td>
                </tr>
                <tr>
                    <td>Metadata management</td>
                </tr>
            </table>
        </td>
    </tr>
</table>