Re: [security-dev] PicketLink AS Subsystem

----- Original Message ----- This subsystem aims to allow PicketLink Federation users to configure their IDP and SP applications via standalone/domain xml files. It also provides a domain model that is used by the PicketLink Federation Console to manage deployments. Basically, it reads the configuration from the standalone/domain files and automatically configures the valves for IDPs and SPs. An application can have one of these roles very easyly, without any specific packaging or configuration. When working with this subsystem, I did some initial tests creating the picketlink.xml and adding it during the deployment. Maybe we can use this approach for PL 3, using the XML config that Marek is working on. There are some drawbacks when doing such thing, mainly related with the mapping between the xsd used by picketlink and the one used by the subsystem. But can be an option.