Shibboleth Developers

["Scott Cantor" <>]

> I thought cookie authentication was for use when you want to set a
> cookie in an external authentication web application using strong
> encryption which Shibboleth would read, validate, authorize and
> look-up / release attributes. This was from reading the source code.

No, the cookie option is for providing SSO with nothing but Shibboleth and
Tomcat, and some kind of REMOTE_USER-based authentication in Apache or
Tomcat. It's just a simple clustering option that I rigged up at OSU and
donated back.

-- Scott