I am looking for an SSO solution that can be customized according to our needs. From what i saw over the internet it seems that Shibboleth and JOSSO are solutions that just need to be installed and configured. My question is to what extent can they be customized to use with web apps.Please consider following points.
- control over cookies and session management
- integration with existing authentication mechanisms being used for the app (e.g. two factor authentication)
- collection of data from the user at the time of registration.
Suggestions on any other frameworks and approaches are welcome