Adobe SSO

[Cantor, Scott]

> We were on a wild-goose chase for many weeks with the vendor -- I have
> learned my lesson to come here earlier in future.

Never rely on any documentation *of Shibboleth* provided by a vendor, it will be at best suboptimal and more commonly just flat wrong or dangerous.

Separately, their SAML requirement docs are almost always wrong also, but that's less easy to do anything about, you just have to know going in to take everything with a grain of salt and focus on incremental testing and limiting special cases until you're forced to do them when the ordinary approaches don't work.

Adobe's is particularly bad on both counts.

-- Scott