A short study about Shibboleth performances.

[Cantor, Scott]

> In my own load tests, I couldn't get more than 25 logins/second without
> response times exceeding the 5s threshold (unsolicited SSO, 1 CPU,
> PostgreSQL, external LDAP for authn & attributes)

Were David's tests with one CPU also? How many cores did you have? The IdP will always be very CPU bound. 1 CPU is definitely not the optimal way to run it, even 2 cores is pretty light.

-- Scott