Shibboleth Auth

where auth is mostly authentication, but also slightly authorization