The dvn-auth mailing list has been established to have a public place to discuss the evolution of authentication and authorization for installations of Dataverse Network (DVN): http://thedata.org In the short term, the focus will be on making DVN a Shibboleth/SAML Service Provider (SP) that authenticates users via one or more Identity Providers (IdPs). Development of this feature is being tracked at https://redmine.hmdc.harvard.edu/issues/2657 and related documents (notes, design documents, meeting minutes, etc.) are being stored at https://drive.google.com/folderview?id=0B_qMYwdHFZghT21ZTkN5STBrSEU&usp… The latest thinking for the design of the DVN SP implementation (still in the early stages) is here: https://docs.google.com/document/d/1y2axfd_ScmXVICFlV8AuPDdp5xHwTag54pUpVef… Especially interesting to discuss on this list will be how various institutions run their Identity Provider (IdP) to ensure that the DVN SP implementation will be compatible with all of them. Beyond Shibboleth and SAML, discussion of anything related to auth such as OAuth, API keys, Single Sign On (SSO) in general, etc. is certainly welcome. Representative development tickets include: - Password restrictions: https://redmine.hmdc.harvard.edu/issues/2814 - API keys (OAuth?): https://redmine.hmdc.harvard.edu/issues/3208 Despite the targeted nature of this mailing list, auth is also on topic for the general Dataverse community mailing list: https://groups.google.com/group/dataverse-community In addition, #dvn on the freenode IRC network is a good place to discuss all things DVN. The latest log is at http://irclog.iq.harvard.edu/dvn/today and the easiest way to join is via http://webchat.freenode.net/?channels=dvn Phil -- Philip Durbin Software Developer for http://thedata.org http://www.iq.harvard.edu/people/philip-durbin