Hacker News Reader

Out of curiosity, what was the reasoning in using saml/idp/xml/etc? Java shop + enterpriseyness?

I don't know a single person that enjoyed dealing with SAML SSO (myself included, using shib)

Care to share the most... er... painful painpoints? We're about to embark on a journey of implementing a SSO solution and are evaluating Windows Identity Foundation.

I've just finished implementing SSO with WS-Fed and WIF. The code samples are the documentation.

We went with SAML mainly because of the standardization. A lot of different technologies are in use at Rackspace because teams are given a lot of autonomy. There are open source SAML libraries out there for pretty much any language, so having another team hook into our SSO solution isn't too difficult.

Reply on news.ycombinator.com