Benefits of Shibboleth-only
============================
1. More shib-enabled resources means less IP maintenance (Penn State)
- A good hybrid solution could do this too, but would require routing all activity (both remote and on-campus) through the proxy
2. Having user-level identification would aide in resolving breach alerts (Penn State)
3. Complete server-side authentication solves the lockdown user scenario (UCSD)
4. Solves the restricting to specific user group restriction as long as could control by attribute and/or specific login (for restricting against "guest" walk-in users) (UCSD)
5. Permits seamless login to resources across multiple domains / outside of the local domain. (Cornell)