Shibboleth Developers

["Jim Fox" <>]

> 
> > 2) SAML2 logins via an SP (with attribute push)
> >
> >   - these consistently took about 60% longer at the IdP.
> >   - and about 100% longer at the SP - to process the assertion.
> 
> I assume you mean with encryption on? I would expect the SP to be about
> exactly that much longer, since the RSA operations are the vast
> majority of
> the work. I'm not sure why the IdP isn't also twice as slow there,
> really.
> 

Might have been 70% or so, but wasn't double.  It's harder to do load
testing with SAML2 as SP delays keep getting in the way.

Jim