This issue is a placeholder for whatever unknown issues will be discovered once we upgrade to Tomcat 10 and Shibboleth 5.X. Some things I am watching:
Tomcat configuration, particularly any possible changes in the server configuration. It is hard to know what might have changed between these major versions.
The Shibboleth release notes suggest four or five possible minor configuration issues that could impact us, that can only be discovered once we are running the new version.
In particular, we may need to rewrite our giant function that determines if a user needs the second factor on login, as there is an indication that a change puts a limit on the maximum allowable size of such a function, less than its current size.
This issue is a placeholder for whatever unknown issues will be discovered once we upgrade to Tomcat 10 and Shibboleth 5.X. Some things I am watching: