> I got a little spooked going through the Shibboleth tutorial when it told
me
> I'd need to add jars inside my JAVA_HOME directory. I had been imagining
> there might be a product which could just be deployed as a war without
> additional installations outside the app server. Am I mistaken, or will
> setting up a Shibboleth identity provider require me to install additional
> components besides the webapp?
By definition an IdP needs a source of authentication and attributes. It
would be crazy to put that inside an IdP that was anything but a toy. The
rest of what the IdP requires pales in comparison to those two issues.
-- Scott