[jms18]

> in reality can be very fragile and needs to be rolled out all or nothing.

What makes you say that? That certainly isn't my experience with Shibboleth.

We deployed our IDP in 2006-07 (I think) and slowly migrated services to it.