Shibboleth Developers

[Scott Cantor <>]

> I think what we should be aiming more for is the JAAS 
> specification. JAAS is the Java specification that deals 
> specifically with Authentication and Authorization. It's 
> designed to be fairly generic (in many ways it resembles
> PAM) and provides a method called "login" that you override 
> to do your authentication step. 

We've explored JAAS without being sure it adds much value. Are you folks
using it for authorization or just authentication?

I don't think a JAAS plugin to do authentication with Shib is a big deal,
but using solely JAAS to expose our functionality seems unlikely.

-- Scott