Welcome

This site not only tracks our progress in getting relying parties working, it is also a relying party. You are welcome to test your IdP or cardselector by logging in. Please do not abuse the system in any way including, defacing the site or entering trash as tickets, milestones or wiki pages.

Configuration

There are multiple infocard buttons displayed on the login page, read the help on each icon to discover what the requirements are and what behavior you should expect from each if you submit a token.

Expected Behavior

You may use cards from any IDP or personal cards to authenticate to this site. If the presented security token has not been seen before and the icon is not configured with a default user we will ask you to associate the 'card' with an existing user account. You may create your own account at the Bandit IdP. Although the account is from the Bandit IdP the card used to authenticate at this site can be from any IdP.

Reporting Problems

We are committed to improving this relying party. If you encounter any problems not already listed below you may enter a ticket, or send email to bandits, or contact someone on the #bandit-project irc channel on irc.freenode.net.

Known issues with the Trac RP

#280

RP should be reviewed for potential injection attacks

#288

TRAC RP should have better identity selector and browser add on support

Known issues with the Python core used by Trac

#278

Python RP should properly handle expected claims with attached attributes

#281

Python RP should handle special chars in claim values

#282

Python RP should be enhanced to support saml 2.0 tokens

#287

Python RP should verify that no namespaces are used which are not part of the inclusive namespaces element