SharePoint Dragons

Out of the box, SharePoint 2010 as of yet only supports SAML 1.1. This is bad news if you, for example, were planning to use claims authentication and let the AppFabric Access Control Service (ACS) handle authentication. What can you do? Basically, create a custom authentication provider. Here are some links:

• http://stackoverflow.com/questions/6964285/sharepoint-2010-and-saml-2-0
• http://msdn.microsoft.com/en-us/library/ee517261.aspx
• http://msdn.microsoft.com/en-us/library/microsoft.identitymodel.tokens.saml2.saml2securitytokenhandler.aspx
• http://blogs.msdn.com/b/chunliu/archive/2010/04/02/how-to-make-use-of-a-custom-ip-sts-with-sharepoint-2010-part-2.aspx
• http://blogs.pointbridge.com/Blogs/nielsen_travis/Pages/Post.aspx?_ID=36
• http://social.msdn.microsoft.com/Forums/en/sharepoint2010general/thread/5933df49-328c-4f23-992e-a11e465c4504

Also, follow the Wiki page at: http://social.technet.microsoft.com/wiki/contents/articles/7826.sharepoint-2010-saml-2-support.aspx