Shibboleth Developer's Meeting, 2017-01-06

Call Administrivia

10:00 Central US / 11:00 Eastern US / 16:00 UK

Calls are normally the 1st and 3rd Fridays of each month. Next call would be Friday 2017-01-20. Any reason to deviate from this?

60 to 90 minute call window.

Call Details

This week's call will use the Zoom system at GU, see ZoomGU for access info.


  1. FYI, new site being put together in Wordpress to get it off our hands - http://newsite.shibboleth.net/
  2. Documentation hire / priorities - input to board / members discussion
  3. IdP 4.0 / SP 3.0 - input to board / members discussion
  4. Git process




  • OSJ-135 - Getting issue details... STATUS  - documentation review
  • LDAP key pinning?


  • Git conversion of v2 stack complete, awaiting signoff



  • Mostly Visual Studio 2015
  • Now looping back over other cases
  • About to do a slew of Installer RFEs


  • IDP-627 - Getting issue details... STATUS
    • My conclusion: leave CSP for now
    • Given existing jquery dependency, do we start moving other javascript to it?
  • OSJ-191 - Getting issue details... STATUS
    • Need testing on Windows and review of String vs. Resource question
  • Testing VS15 dependency builds


  • IDP-1105 - Getting issue details... STATUS
  • Make idp-jetty-base 9.3 like Jetty93 ?
  • (if time) Sanity check on WebAppProvider.java. Basically, AFAICT properties are not propagated from start.jar to the web app itself, so we have a custom jetty-deploy.xml which reads properties from our jetty-base/start.d/idp.ini. The only property that really matters here is the location of the IdP webapp itself, and our instructions use a system property, maybe thats better than the custom jetty-deploy.xml.