Changing SP from Shibboleth to SimplesamlPHP

[Cantor, Scott]

On 7/9/12 11:42 AM, "Jeff Silverman" <jeff at moodlerooms.com> wrote:
>- What do I need to consider?

All of your SAML 1.x IdPs, if any, will have to push attributes, or
support the artifact profile, because of software limitations. That's an
extreme annoyance, to me anyway.

The other issue I ran into recently with an SP using it is an apparent
lack of flexibility with respect to attribute mappings between SAML 1 and
2, but that could easily be their app or deployment, not a software
limitation.

>Our reasons for considering this are performance and load balancing
>related.

It's very unlikely that anything in PHP is as fast as native code, though
I'd be more than happy to listen to any concerns on the dev list.

But for a PHP application *using the PHP session mechanism*, it would be
unlikely for a PHP implementation that is designed to work with that
session not to be a more sensible solution, apart from other
considerations.

-- Scott