Date: Fri, 29 Mar 2024 13:02:28 +0000 (UTC) Message-ID: <539915816.7985.1711717348493@ip-10-10-7-29.ec2.internal> Subject: Exported From Confluence MIME-Version: 1.0 Content-Type: multipart/related; boundary="----=_Part_7984_1748324200.1711717348493" ------=_Part_7984_1748324200.1711717348493 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Content-Location: file:///C:/exported.html
Benefits of Shibboleth-only
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D
1. More shib-enabled resources means less IP maintenance (Penn State)
- A good hybrid solution could do this too, but would require routi=
ng all activity (both remote and on-campus) through the proxy
2. Having user-level identification would aide in resolving breach alert= s (Penn State)
3. Complete server-side authentication solves the lockdown user scenario= (UCSD)
4. Solves the restricting to specific user group restriction as long as = could control by attribute and/or specific login (for restricting against "= guest" walk-in users) (UCSD)
5. Permits seamless login to resources across multiple domains / outside= of the local domain. (Cornell)