AACLI to web interface?

[Rod Widdowson]

I think that this might be a good idea but I had one concern which is that
people would probably not want to make changes to their live setup while
they were testing.

Right now, if you are not running a reloadable attribute resolver and filter
you can make changes to your production config and "just" run accli.  When
it the configuration works the way you want you can fire off a container.  I
assume that people with reloadable configs have a sandbox web server that
they test in.

AIU your proposal this would just be a URL in a running IdP that the admin
could hit (with curl or a browser or something), and so to allow testing,
the config that was used would have to be reloadable.  There are plenty of
ways to make that work of course and I'm not going to get into designing
that here.

Once we understand this, is it worth taking it over to -users?
/R