Benefits of Shibboleth-only

1. More shib-enabled resources means less IP maintenance (Penn State)
  - A good hybrid solution could do this too, but would require routing all activity (both remote and on-campus) through the proxy

2. Having user-level identification would aide in resolving breach alerts (Penn State)

3. Complete server-side authentication solves the lockdown user scenario (UCSD)

4. Solves the restricting to specific user group restriction as long as could control by attribute and/or specific login (for restricting against "guest" walk-in users) (UCSD)

5. Permits seamless login to resources across multiple domains / outside of the local domain. (Cornell)

  • No labels