Shibboleth authentication to a RESTful API from mobile, curl, etc.

[Tom Scavo]

On Fri, Apr 3, 2015 at 10:21 AM, Cantor, Scott <cantor.2 at osu.edu> wrote:
>
> I see zero value in turning SAML metadata into JSON for servers, but for clients it probably has significant value.

That distinction is not altogether accurate. A server that fetches
metadata on behalf of browser clients (that are subject to the
browser's same-origin policy) is itself acting as a client.

In any case, I get your point. SAML metadata drives SAML deployments,
and that is that. Even so, it will be interesting to see if other SSO
protocols (such as OpenID Connect) bring about other metadata exchange
formats.

Tom