Questions starting to implement Shibboleth IDP

[Cantor, Scott]

> Yes I believe you understand what I'm try to do.  The idea of using an
> external login handler sounds good.  I thought that the external login handler
> had to be in the same tomcat instance as the IdP.

It does. What it does after that is up to it.
 
>  They will actually be in
> different virtual machines.  Doesn't Shibboleth IdP handle session
> management it or does it call the external login handler every time?

It depends how it's configured.

-- Scott