OpenSAML user discussion

["Scott Cantor" <>]

> I'm considering using OpenSAML in the project I'm currently working on. 
> The project might require features only available in SAML 2.0. 
> Therefore, I'm trying to figure out whether it would be a better idea to 
> use OpenSAML 2, or to use OpenSAML 1.1 and write the changes needed 
> myself. So, I guess it comes down to; how stable is OpenSAML 2?

You didn't indicate what language you meant. Both versions are relatively
API stable, and both are extremely untested under any significant load or
real-world use, so nothing is set in stone.

I believe the signature and encryption APIs are not yet frozen in Java.

If you demand a frozen API or need to ship by early next year, then I
wouldn't suggest it.

-- Scott