Team, kindly help me how to implement SAML based authentication for iPhone application. I have .NET REST based JSON webservice as my backend service.
Kindly advice me on this requirement.
There are existing standards and tools to support your requirement today. As Scott mentioned, it does require either using the embedded browser in iOS within your application or allowing the iOS Safari Browser to handle the SAML/Browser portion of SSO (each has its own pros/cons). You can check out this free White Paper entitled, "A Standards-based Mobile Application IdM Architecture" that talks about how Ping (my employer) customers are handling this today if you'd like some more ideas.
The SAML-only solution has properties that bother some due to the phishing risk of downloadable apps, but the mechanism involved is outlined at https://wiki.shibboleth.net/confluence/display/SHIB2/ECP
Other approaches involve hybrids of OAuth or other technologies but you won't find any standards or tool support for any of this.
Related
Does anyone know if I use the Twitter Framework will my app contain encryption?
Frameworks are not included in your app. They are in the device's firmware and are not copied into your app. So even if an iOS framework had encryption in it, it is not included in your app, you just make function or method calls to it, and are not distributing encryption software.
I think no one really answered your question directly; they were merely inferring your intent. The Twitter framework docs only mention HTTP for API requests. The Twitter docs on this say that SSL is optional though encouraged. So I'd imagine that iOS is handling user authentication via SSL in the background, but that all API requests by developers are done over HTTP using oauth. This is only speculation -- to verify you'd want to run a packet sniffer on your local network and check out the transactions when you call the framework methods.
Regarding the export controls mentioned in other comments here, I'd advise you to look at the iTunes Connect FAQ dealing with export controls within the Dev Center. Apple makes it very clear in that document that using encryption integrated into the iOS frameworks still requires you to apply for an ERN with the US Dept. of Commerce. (I won't quote it due to NDA) The other comments currently on this page are simply wishful thinking. I'm sure some developers were confused (and it is confusing), or perhaps have outright lied and have apps in the store which are violating US law. IANAL; I'll leave that choice up to you.
Having said that, there have been some exemptions added to these requirements, as outlined here.
In my app I want to provide a strong integration with social network and web services (facebook, flickr, youtube, picasa, dropbox… and more!).
To implement such integration, I'm currently using several libraries like Facebook iOS SDK, objectiveFlickr and so on.
The problem is that I have several dependencies and I created my own wrappers in order to use the same interfaces in my classes, and I fear that the things are going to become more complex and hard to manage as soon I integrate new services.
So, my question is: is there a framework with an high level of abstraction that make easy (or less painful) these integrations?
ps: ShareKit it's far away from what I need! :P
You need ShareKit: http://getsharekit.com/
#daveoncode you might try Socialize: http://www.GetSocialize.com (full feature list at http://go.GetSocialize.com/features). Right now Socialize supports Facebook, with Twitter coming this month and Google+ next, but it the SDKs are open source so you can always offload to Socialize what it can do and then handle the rest yourself. Let me know if that's helpful.
DROdio
Does Google Server provide any server side support for Google TV devices? Does it provides any plugin or installables specific to Google? For example, Google advertisement or something like that?
Nothing specific that's targeted at the developer. We support our apps with significant server side infrastructure. (Beyond that statement I'm not going to discuss specifics)
Google App Engine is targeted at all developers and is an excellent way to provide server side support for your apps.
I'm working on an interface for an existing web application that will allow iPhone and other mobile clients.
I have started implement a JSON API and I need to give some detailed specificaitions for the App to an iPhone developer.
What I am curious about is whether other developers are using session data in their JSON / mobile client communications.
Do the common url grabbing libraries of iPhones (and other mobile devices) mimic a browser's cookie handling?
Can someone suggest what libraries might be used to achieve this? Are there any online tutorials or blog entries that outline state based web connectivity in an iPhone app?
I've used ASIHTTP (http://allseeing-i.com/ASIHTTPRequest/) and JSONFramework (http://code.google.com/p/json-framework/) to achieve this.
Both very good libraries that are easy to work with.
I'm searching for a forum software which offers REST like API. It should be able to respond to simple calls like retrieve-post, add-new-post etc. and return the result set in JSON or XML format.
Those that immediately come to mind are phpBB, Vanilla, and/or vBulletin. But I don't know if they have REST API. Also I don't intend to deploy the forum for a website. I intend to integrate a forum like feature inside the Android and iPhone apps.
Edit: I don't intend to host the server on mobile. Just access it from the mobile app.
thanks