Shibboleth Developers

[Steven Carmody <>]

1) I'd like to ask sites that work with the beta to post success 
stories, in addition to questions and problems. This information will 
help us to evaluate whether the new packages are usable. Normally, the 
success stories are represented just by silence....

2) The new IdP component no longer uses apache/mod_ssl to implement the 
trust layer. Instead, the java IdP code implements the trust checking. 
One implication of this change is that the new IdP will ONLY implement 
trust when using the new format metadata. If the new IdP is used in 
conjunction with the older metadata format, NO trust checking will be 
performed.

3) Because of the change noted in the previous point, we believe it 
should be possible to use the new IdP WITHOUT apache, and using just 
Tomcat. We have not had the time to investigate this. However,if someone 
does identify how to do this, please post a description.

4) We've created an area on the Shib WiKi where people can add comments 
about their experiences using the new version. Look at this page, on the 
bottom, 
https://authdev.it.ohio-state.edu/twiki/bin/view/Shibboleth/ShibOnedotThree 
, under " Using the v1.3 Shibboleth Implementation". Remember, though, 
that this WiKi is shibboleth-enabled, and you'll have to register in 
order to edit the text.