OpenSAML 3.x documentation?

[Cantor, Scott]

> But when I go to the Shibboleth homepage, click Products | OpenSAML-Java
> and click the Configuration link -- or the Download and Install link -- I get docs
> for 2.x, not 3.x.

The website is a disaster, but I will take a look at what's there. In any case, the wiki is the only reliable place to be looking for anything. There is a dedicated wiki space for the 3.x library but it is not really documentation at present, and I don't see that changing any time soon.

> 3.x and 2.x are both available via the Maven repository, and it looks like 3.x
> has been around for a while. So I thought I needed to use 3.x. But I'm new to
> SAML and SSO, and although I am a quick study, good documentation is
> essential :)

OpenSAML is not really a fully documented library, and we have no resources to change that. It is a by-product of the Shibboleth Project made available as-is and most people should be using existing SAML implementations, not building them. We strongly discourage that.

If you're new to SAML, stopping and reconsidering your course here is your best choice.

> So do I use 2.x or 3.x, and if I am expected to use 3.x, where is the
> documentation?

In effect, there really is none. The documentation for 2.x can be applied in many significant respects, but not all, and even that documentation assumes an experienced XML and SAML developer.

The javadocs for 3.x are published with the Shibboleth documentation, however [1]. And that's about all there is.

Any further discussion should be on our dev list, that's the only support forum we provide for OpenSAML.

-- Scott

[1] https://wiki.shibboleth.net/confluence/display/IDP30/Configuration