The login server should support multiple authentication methods:
- X.509 certificates (must)
- Username and password over SSL (must)
- http-spnego (highly desireable)
The application servers (typical web servers run by DLCs) will use Shibboleth.
The system should support application server that are running:
- Linux
- Solaris
- Windows Server 2003 or later
- Apache 1.3.26+ (must)
- Apache 1.3.20+ (should?)
- Apache 2.x+ (must, get specific numbers)
- OpenSSL 0.9.7 (must)
- OpenSSL 0.9.6 (should?)
- IIS 6.0 or later (must)
- IIS 5.0 or earlier (not needed)
What are the requirements imposed by the Shibboleth components?
Are there browser requirements?
What about other application servers such as the Oracle WebAS server?
Are there UI requirements?
What are the documentation requirements?
What are the support requirements?
Are there other integration requirements such as support Roles, Moira, or other components?