Ask HN: What's your opinion on Shibboleth?

My university's IT department is currently working on deploying Shibboleth [1] on campus, to replace the old mix of LDAP, Kerberos, and a homebrew solution called WRAP, at least for Web applications. I have been doing a lot of research on Shibboleth, so I was wondering: What are your opinions on Shibboleth?

[1] http://shibboleth.internet2.edu/