embedded Java SP

[Rod Widdowson]

Aren't you just replacing one problem (getting an IdP configured) with two
(getting an IdP and an SP configured)?

And (as I know to my cost) you really do not want to pre-configure the IdP
to anything - you cannot rely on users ever de-configuring and that leave an
interesting cross section of exploit about (it would be nice to think that
people do unconfigure testshib when they are done).