The Shibboleth 2.x IdP is already end-of-life and most of the UNC system has yet to upgrade to IdP v3. Additionally, communication within the UNC system about best practices with SSO and IDM has not been great. All 16 campuses are dealing with this over the next year, and we should get together regularly to discuss our solutions.
Join the conversation and stay up-to-date on discussions and meetings via the Google Group/Mailing list: firstname.lastname@example.org.
See the SIG FAQ for instructions on joining a SIG Google Group.