Testing applications with Shibboleth

[Cantor, Scott]

> I don’t know if there’s documentation, but if you search the list archives,
> there are people who have used PIV cards — and maybe CAC, though I don’t
> recall it specifically— to authenticate using the X.509 flows.  In the end,
> they’re just smart cards.

Oh, ok, guess my second response is off base then. X.509 is definitely a pain on the web server side of things, but certainly doable.

-- Scott