Django and Shibboleth

[Alfred Buterol]

I'm investigating the options for using Shibboleth in a Django
deployment. From what I've found, things look somewhat sparse. Can
anyone comment on the following?

* Is anyone using the django_shibboleth module (see
http://code.arcs.org.au/gitorious/django/django-shibboleth/trees/1.1)?
If so, what experiences have you had with this module?

* SAML 2 implementations for Django (e.g., django-saml2-sp) and
Python in general (e.g., pysaml2) appear to be somewhat experimental
and include little documentation. Does anyone know of stable SAML 2
solutions for Django/Python?

Thanks in advance for any help!

[Tom Evans]

Are you trying to build a SP or an IdP? We've built both using a C
library, lasso[1], which has python bindings. Entrouvert is a french
company, backed by government grants, which produces open source
software for identity management. Plus facile si tu parle français
though.

If it is just a SP, you only really have to implement
AssertionConsumerService and SingleLogoutService, and be able to
initiate a SSO request to the IdP - its not masses of work,
particularly with lasso.

We've not hooked into a Shibboleth federation yet however, there may
be intricacies to their federation.

Cheers

Tom

[1] http://lasso.entrouvert.org/