4 ms·
With all due respect you probably do not work in an institution where you have to rely on SAML for day-to-day operations (I work in a uni, so Shibboleth). If y
by 616c 13y ago
With all due respect you probably do not work in an institution where you have to rely on SAML for day-to-day operations (I work in a uni, so Shibboleth). If you did, you would realize why SAML is lauded as a great solution, but in reality can be very fragile and needs to be rolled out all or nothing. I have been part of a multi-year piecemeal deployment and it has rough edges.
- Spearchucker 13y agoI have, and know exactly what the issues are. It's why (if given the choice) I prefer WS-Fed and Active Directory. ADFS 2 for .Net is phenomenally good.
- jms18 13y ago> in reality can be very fragile and needs to be rolled out all or nothing. What makes you say that? That certainly isn't my experience with Shibboleth. We deployed our IDP in 2006-07 (I think) and slowly migrated services to it.