Shibboleth Developers

["Scott Cantor" <>]

> Chad mentioned a Filter implementation but if you can
> keep the filter as profile agnostic as possible and have the meat
elsewhere,
> you might get more adopters of a "standard" Java SP.

That may be, whatever my personal opinions about that architecture (as you
know, I don't agree with it), but to build a gateway to yet another SSO
protocol, we first need the SP portion anyway, and only then can any sort of
backhaul to something else be constructed.

The backhaul might as well just be CAS, as Howard Gilbert originally wanted
the SP here to use. It already exists, is adopted, and has good Java
support. But the better approach is to ignore it and remain agnostic,
letting people combine the SP with any protocol they choose, which is how my
SP altready works. I don't agree with forcing a specific proprietary
protocol on people if we can avoid it.

-- Scott