upgrade from 2.4.3 to 2.5.1

[Christopher Bongaarts]

On 3/29/2013 1:02 PM, Cantor, Scott wrote:
>> I also saw a note that made it seem like the use of the shibboleth logo
>> >was not appropriate.  I always assumed that this would be fine to show on
>> >the info pages displayed by shib, and many of our sites will display that
>> >when there is an error or access issue.  Is this considered a copyright
>> >problem?
> Not in our case, but it is a project problem. The logo only appears
> because something went wrong, 99% of the time because something unrelated
> to Shibboleth went wrong. It leads users to go searching us out to
> complain or expect us to fix their access problems.

In our case, when switching from our local campus SSO to Shibboleth, it 
lead to a bit of "bad publicity" for the service - anything something 
went wrong, almost never the fault of the Shib software, people would 
complain to the helpdesk that "Shibboleth isn't working".  Our IdP 
service started to get a negative reputation as a result (since that's 
what users think of when they see/hear Shib).  It also resulted in the 
helpdesk assigning tickets to us instead of the application support 
people, when 99% of the time it is due to a misconfiguration or other 
problem at the SP end.  (Rule of thumb: when troubleshooting, start at 
the app and work your way back.)

We're working on developing branded error pages for campus SPs to drop 
in so they get directed to the appropriate place, using more generic 
terms like "authentication" instead of "shibboleth" when necessary.

-- 
%%  Christopher A. Bongaarts   %%  cab at umn.edu          %%
%%  OIT - Identity Management  %%  http://umn.edu/~cab  %%
%%  University of Minnesota    %%  +1 (612) 625-1809    %%