Android Application Question

[Klingenstein, Nate]

> Wouldn't it be better all the way around if the Shibboleth IdP just
> supported OIDC?

I'll be honest again.  I haven't been shy about saying it elsewhere and
I'll repeat it here: I don't understand OIDC.

There are so many pages of specification that I get horribly lost, even
with some of the diagrams showing how the specifications interrelate.

http://openid.net/connect/

Applications come to me wanting a string they can resolve for user data,
and they just want a few pieces of information.  It's an uphill fight to
make them do more, and I only win that fight when I have winning use
cases in hand.

Could library support for OIDC or OAuth 2.0 come far enough that it's
easy enough for the applications I'm trying to work with?

Hopefully, but I'm not even getting to that point in many of these
conversations.  I want to meet them at their level and then gradually
entice them to do better, and I need the right framework for that process.