Discovery Service

[Roy Spectech]

Shibboleth Community,

We're new to Shibboleth and have some questions about Discovery Services.

We're SP-only but this WiKi Page:

  https://wiki.shibboleth.net/confluence/display/SHIB2/DiscoveryService

Is pretty complete (thank you Scott et al).

The example they use is very good:

As an example, consider a commercial SP with contracts with three
institutions: Institution A is a member of InCommon, Institution B is
a member of the UK federation and Institution C is a member of the
SWITCHaai Federation

When a user approaches the SP, they should not be presented with a
list of all the IdPs known to all three Federations, as the SP only
needs to know which of these three IdPs the user needs to be sent to.
The SP can provide guidance to the user in selecting one of these
couched in terms that their target audience can understand.


Fine. So DS is a mini "router" to point people the IdP they need to
got to instead of having them try and remember or pick from a list.
Very cool.

But since are SP-only, I think we'll be using one Override per
customer (which matches the one VHOST per customer). Our customers do
not have that choice as they each only have just one IdP to go to.

That said, has anyone tried the embedded DS?

   https://wiki.shibboleth.net/confluence/display/EDS10/Embedded+Discovery+Service

It seems that this tight service might be just what SP-only providers need.

Thoughts?


-- RGS

==================================
Roy G. Specter
roygspectech8 at gmail.com
========================================