An open discussion list for topics related to the eduGAIN interfederation service.

[Peter Schober <peter.schober AT univie.ac.at>]

* Nick Roy <nroy AT internet2.edu> [2019-11-20 00:03]:
> Perhaps counterproductively adding to my rant below: ADFS is
> terrible, but works just well enough to lull people into the belief
> that it won’t screw everything up, as it invariably does, down the
> road. I spend at least 80% of my direct-end-user-contact time
> coaching people with ADFS problems. ADFS *should not be used* in the
> context of R&E federations, nor should other similar software. This
> is a real problem that I don’t know how to address in our context,
> but the problem is getting worse every day.

Thank you for your very clear words in this regard.

Maybe this should be made known more widely? Open to ideas how that
would work. A REFEDS blog post? A disclaimer message to be relayed by
(Full Mesh) federations?
I'll start by quoting your post above in our documentation.

At this time we only have a single MS-ADFS entity registered, so my
communication has been pretty clear and seemingly was effective so
far. That one entity could end up being used a lot more, though,
through services proxied behind its SP-side...

-peter