HTTP-POST vs. ECP

[Christopher Bongaarts]

On 7/13/2012 4:47 PM, Leif Johansson wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> On 07/13/2012 11:43 PM, Jon Carlson wrote:
>> We are in the process of designing SSO plugin support for our
>> enterprise backup product.  Shibboleth/SAML will be the first SSO
>> implementation, if everything goes as planned.  Thank goodness for
>> OIOSAML.  :-)
>
> I advise against using OIOSAML. It is not a general SAML implementation
> in java (as you might think) but an implementation of a SAML-profile
> used by the Danish government (and by nobody else).

We have some (important) apps running it.

I would definitely not advise it as the first choice (if someone asks 
about it, I will suggest to them that they will likely have less work if 
they just frontend with Apache/AJP+Shib SP), but in this case the app 
architecture happened to align much better with OIOSAML.

-- 
%%  Christopher A. Bongaarts   %%  cab at umn.edu          %%
%%  OIT - Identity Management  %%  http://umn.edu/~cab  %%
%%  University of Minnesota    %%  +1 (612) 625-1809    %%