Changing SP from Shibboleth to SimplesamlPHP

[Tom Scavo]

On Mon, Jul 9, 2012 at 11:42 AM, Jeff Silverman <jeff at moodlerooms.com> wrote:
>
> It looks like it is *technically* feasible to move an SP from Shibboleth to
> SimpleSAMLPHP, even against the same IdP.

In principle, yes.

> I'm curious about aspects such as Federation of apps, and Metadata signing.
>
>  - Can the InCommon Metadata be used with SSPHP?

Yes, people are doing it now. AFAIK, SSP is not as full featured as
Shibboleth with respect to metadata, but SSP is at least usable.

>  - Has anyone ever done this? ("This" being "move an app protected via a
> Shib SP to use a SSPHP SP instead")

I know there are InCommon participants who have used both. Have you
considered posting this question on the InCommon participants list?

>  - What do I need to consider?

Right offhand I can't think of any serious "gotchas."

> Our reasons for considering this are performance and load balancing related.
> Also, it opens up options on the web server itself, such as moving to nginx
> instead of Apache.

Yup, I agree there are good reasons to at least evaluate SSP to see if
it meets your needs.

Tom