embedded Java SP

[Tom Scavo]

On Fri, Mar 4, 2016 at 7:56 AM, Rod Widdowson <rdw at steadingsoftware.com> wrote:
> Aren't you just replacing one problem (getting an IdP configured) with two
> (getting an IdP and an SP configured)?

Don't you have to do that to use TestShib anyway? Or a local SP set up
for that purpose?

> And (as I know to my cost) you really do not want to pre-configure the IdP
> to anything - you cannot rely on users ever de-configuring and that leave an
> interesting cross section of exploit about (it would be nice to think that
> people do unconfigure testshib when they are done).

Perhaps yet another reason to move away from TestShib.

Tom