[ckan-dev] repoze.who vs IAuthenticator

[Alice Heaton]

Hello,

I see there are two ways to write an authentication plugin for CKAN - one is to use the repoze.who middleware, the other is to write a CKAN plugin that implements ckan.plugins.IAuthenticator.

I can see both in use out there (eg. https://github.com/GSA/ckanext-saml2 uses IAuthenticator while https://github.com/kata-csc/ckanext-shibboleth uses repoze.who). 

Does anyone know how the two approaches differ? 

Thanks,
Alice