Shibboleth Developers

> Dear Shibboleth experts ;-)
>
> One requirement is to shibbolise our mail server 
> that is based on MS Exchange so that our staff 
> can get access to web-based email using their 
> single sign on LDAP password.  Has anyone done 
> this and if so is any documentation or good 
> advice available?

Other campuses have asked us to investigate this. 
RSA has a product that provides SSO across 
Exchange, so it is possible. We've asked Redmond 
for some info about how to do this -- so far, 
nothing has come back out of the black hole.

Perhaps if everyone sings to Redmond in harmony 
on this..... anyone else interested?

> In addition, some concerns were also raised 
> about our users going to an Internet café and 
> trying to access that way that may compromise 
> usernames/passwords from Key loggers, what 
> alternatives can shibboleth offer here, has 
> anyone coupled RSA one time passwords with 
> shibboleth to overcome this or are there other 
> solutions you may know of?

Shib is agnostic about the authn mechanism that 
an IdP uses; it should be possible to use just 
about anything....