Shibboleth Developers

[Scott Cantor <>]

> I do agree that the AA is potentially useful outside of the cononical 
> shib use case, but the problem with this proposal is that not all 
> identifiers are created equal.  Once the use is no longer anonymous, you 
> start authenticating directly to the target, and you have no concept of 
> presence; why not just use ldap?

Cross-organizationally, because I think my model for PKI validation (once
it's done) is more viable than what LDAP products do, but I'm biased. ;-)

-- Scott

------------------------------------------------------mace-shib-design-+
For list utilities, archives, subscribe, unsubscribe, etc. please visit the
ListProc web interface at 

    http://archives.internet2.edu/

------------------------------------------------------mace-shib-design--