Shibboleth Developers

> It is our hope that time will permit us to explore some additional
> mechanisms such as a Tomcat Realm or JAAS implementation of the SP as
>  well, but we are not making any promises that either is even
> possible, let alone capable of being done in a timely manner with
> existing resources.

We've done a JAAS module that works with both mod_shib and the Java SP
and uses the 'standard' username/password JAAS-callback (passing a
random handle, not a password) provided by all servlet containers.
This could also be used with app-server specific code such as Tomcat
Realms, using custom callbacks. The existing JaasRealm would be a good
starting point.
The code is close to completion, but the documentation is lagging behind
and I won't have time to update it soon. If you have any questions
please just email me. There is some patch and (partially) out of date
documentation at http://spie.oucs.ox.ac.uk/

Cheers,
Chris