Shibboleth Developers

["Scott Cantor" <>]

> - Locations depend on build property idp.webapp.name, which 
> is configurable.
> - Multiple ContactPerson elements
> - KeyAuthority
> - Multiple certs
> - Signing
> - Option to choose desired descriptors (e.g., suppress 
> IDPSSODescriptor)
> - Alternate NameIDFormats (like X509SubjectName)
> 
> Actually, if you can do the first one or two of those items, GridShib
> will work on the rest (and contribute the result back to Shibboleth).

Most of these are fine if the goal was to build a real metadata editing
tool, but that's not the goal here. We want a simple form to spit out the
basics and people can hack on them as needed as they get more advanced.

Even asking for explicit endpoint locations is too much. People don't get
it, and they're not prepared to handle it. If they're adept enough to change
the defaults for some reason, they can prepare the metadata themselves or
edit what this spits out. And eventually use a real tool designed for the
purpose.

I can't think of any reason a real tool for this would be web-based. Doing
it on the web just makes it awkward.

-- Scott