Confused about using the discovery service

[Cantor, Scott]

On 6/19/12 10:24 AM, "Sukesh Nischal" <Sukesh.Nischal at itslearning.com>
wrote:

>I¹m trying to set up the discovery service for the first time, but I¹m
>getting errors regarding metadata.

The following specification covers the discovery protocol and the metadata
extension required in an SP's metadata:

https://wiki.oasis-open.org/security/IdpDiscoSvcProtonProfile

The metadata extension is the endpont of the return path into the SP from
the DS.

You will also see an example of the endpoint in the test metadata
generated by the SP's metadata handler.

> 
>I find the documentation on the shibboleth site be sparse and difficult
>to follow,  some working config examples would have been helpful.

There are hundreds of metadata files around that are working examples.

>Does anyone have any working examples or clearer guides on how to set
>this up?

Every federation offering a DS has metadata that would be a working
example.

You also should consider whether you even need this DS. Unless you're
sharing it amongst a number of SPs, the embedded DS is a better option.

-- Scott