Shibboleth Developers

["Cantor, Scott E." <>]

> Would you want to expand the ShibSSO protocol at all with new saml2
> authn request features?

For the record, no, I wouldn't do that (and I don't think the other 
implementations generally do either). The idea is you have your defaults set 
up for that partner, and you need a link to trigger them. In our case, we 
have a protocol with a couple of additional options already, but I wouldn't 
advocate adding any others.

> Can we use JSON instead?  It's better than XML, I hear.  ;)

Structured data is for sissies, flat's where it's at.

-- Scott