<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div>
<blockquote type="cite" class="">
<div class=""><span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">If
all your SP partners fully participated in some federation (like </span><span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">InCommon),
you wouldn't have had to send 100s of email messages to </span><span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">coordinate
your upgrade to Shib IdP V3.</span><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">
</div>
</blockquote>
</div>
<br class="">
<div class="">I’m wary of pushing the “all in 1” concept too far. The logical extension of that is if InCommon is managing all your identity provider’s connections, then why not pitch it all over the fence?</div>
<div class=""><br class="">
</div>
<div class="">My “why not” is that I’ve seen enough big shifts in strategy and deployment paradigms to be somewhat paranoid about putting all my eggs in a basket I have virtually no control over.</div>
<div class=""><br class="">
</div>
<div class="">I don’t think there’s a risk of deliberate failure so much as gradual change in priorities, commercial incentives, and functionality matrixed against the indefatigable force known as laziness. It’s a natural crevice for technical debt to accrete
in.</div>
<div class=""><br class="">
</div>
<div class="">The major question I try to ask is, “if I were completely leveraging your model today and I wanted to switch to ‘something’ else, how awful would my life be?”</div>
<div class=""><br class="">
</div>
<div class="">Initial responses indicate that the question isn’t asked nearly as frequently as organizations find themselves answering it.</div>
</body>
</html>