<html><head></head><body><div>Hi,</div><div><br></div><div>we're looking into using XMPP together with (passwordless) single sign on mechanisms such as Shibboleth (SAML).</div><div><br></div><div>As most (all?) clients only support password authentication, this cannot be used directly. Implementing Shibboleth is also not trivial, so it is unlikely we can convince a large portion of the developers to do so.</div><div><br></div><div>We are therefore looking into creating per-application passwords on a web page. To make this easy, it would be nice if applications were to supported a URI like xmpp:<a href="file://romeo@montague.net?addaccount;password=Jul13t">romeo@montague.net?addaccount;password=Jul13t</a>, as an extension to XEP-0147.</div><div><br></div><div>This would be much easier to implement and would — for the user — make adding an account almost as simple as native SSO support.</div><div><br></div><div>What do you think?</div><div><span>-- <br><div><div>Yours sincerely,</div><div><a href="https://me.uni.kn/marcel.waldvogel">-Marcel</a></div></div></span></div></body></html>