implement Shibboleth

[Peter Schober]

* Michael O Holstein <michael.holstein at csuohio.edu> [2016-01-25 20:19]:
> As it pertains to library stuff, do you folks already use EZproxy?
> .. that supports shib and there's an Internet2 howto :

While that's a partial (and sufficient, for the lilbrary use-cae) and
cheap SSLVPN replacement it supposes you access the EZproxy or library
portal first, to get at those special links.
Whereas with SAML/Shibboleth subjects that know they'll find Nature at
www.nature.com just access that, same as ever, and then "log in via
[their] institution".

You'll probably want to do both anyway (and make EZproxy a SAML SP to
your Shibboleth IDP, gaining SSO for those resources, too) but EZproxy
alone isn't sufficient, IMHO.
-peter