...
6. A collaborative development effort at Cornell includes staff members from Indiana University as well. The JIRA project housing the development issues resides at Cornell. Users from both campuses login with their local credentials, and use Shibboleth to login to the JIRA instance.
7. (Login error processing (needs text)) When authentication fails, a recipe is need (and perhaps interfaces?) describing how an authN plugin should return information information to the browser user about the failure and "next steps".
Permissions -- Functionality and Management
...