Shibboleth Developers

["Scott Cantor" <>]

> I think Shibboleth supports cross domain SSO by using Open SAML Api.

There is nothing resembling a SSO API in OpenSAML. It's a minimal library
that does some XML manipulation and some signature work, and the C++ version
contains a few other pieces. The Java has essentially nothing else.
Shibboleth's code base dwarfs it, probably something like 10:1

The split is much closer to 50/50 in v2.0. I can comfortably call OS2 a
library with an API that actually does things.

> I am
> ready to take as is, and enhance with additional features based on our
> needs. For that, I would like to know where to start form? I have to bind
> with SAML V1.1 only.

If you're looking for a finished product, you can use v1.3. If you're
looking for an SP in Java to build around, we don't have one.

I don't know how else to answer you. The code's there as is a ton of
documentation.

-- Scott