Shibboleth Developers

["Scott Cantor" <>]

> On lines 180--182 of the protocol spec it suggests that the
> authentication authority may choose to process authentication queries
> directly.  Will the next version of the implementation support this?

I doubt it, mostly because there's no memory of assertions issued now. Maybe
once we have to implement some persistence for things like logout, but I've
never really seen a particularly interesting use case for it come up in our
community.

I'm sure you know this, but queries can't be used to say "authenticate me".

-- Scott