Radio buttons instead of a list box in the embedded DS?

[Wessel, Keith]

Rod,

Thanks for these thoughts.

Unfortunately, we have a lot of SPs who use Discovery and have chosen to point to our centralized service. I think I could make a simple package and persuade most of our folks to install it... but there are a couple of sticking points such as Box. We have an enterprise domain for all three campuses, and they have to have a single URL to send folks to. That single URL is currently our centralized DS. I suppose I could set up a local box to do that job, too.

What was the driver for not doing endpoint validation in the EDS? Lack of demand? Complexity? I know it was intended to be embedded into an SP, thus reducing the need for it. But if it's not complex, I wonder how easily I could add it?

I'm, unfortunately, now at the same point where I was with SimpleSAMLphp. It was quite easy to change that to radio buttons for its built-in discovery, but there's no endpoint checking. I was holding off on hacking the metadata loading to pull in discoveryResponse endpoints and on hacking the discovery page to check them, but that might also now be an option.

Thanks again for all the help on this,
Keith


-----Original Message-----
From: dev [mailto:dev-bounces at shibboleth.net] On Behalf Of Rod Widdowson
Sent: Wednesday, June 22, 2016 10:18 AM
To: 'Shib Dev' <dev at shibboleth.net>
Subject: RE: Radio buttons instead of a list box in the embedded DS?

I was thinking about endpoint validation and the EDS.

If you were to have one EDS per SP (which is the design centre), you could
configure the EDS to run in "no parameter mode" (set defaultReturn to be
"\Shibboleth.sso\Login" (or whatever) and then point to it.  You might need
to enter an REF to make sure that it never looked at the standard DS
protocol parameters (as I recall the current behaviour is to look at the
parameters and fall back to defaultReturn).

You then get "built in" endpoint validation - you can only ever get sent
back to yourself.

I've mentioned how to use radio buttons.  

I'll also add that although much of this can be done statically, if you do
use the EDS you will get the "last selected" capability as well as the
option of auto-follow which might work quite well in such a constrained
environment.

-- 
To unsubscribe from this list send an email to dev-unsubscribe at shibboleth.net