...
If the server will prompt the user for username and passwords, then the server must be operated by NIST by the time the project reaches the pilot stage. This is an ITAG policy.
It may desireable be desirable for this project to leverage the infrastructure being created by the WebSSO project but that is not a firm requirement at this time.
...