PeopleSoft/WebLogic proxy with Shibboleth Native SP and Apache

[Marc Boorshtein]

While I'm not working at a university that has implemented these
technologies I have implemented reverse proxies for authentication and
weblogic on several occasions and I would NOT only protect the login
page but the entire application.  The reason is that if you only
protect the login page and not weblogic someone could spoof their
login by injecting a header.  Better to use the reverse proxy to cover
everything to guard against that.

Marc