Discovery Service
Nate Klingenstein
ndk at internet2.edu
Fri Aug 9 16:38:54 EDT 2013
Roy,
If you have your URL space partitioned by IdP, then you should just send the user back to their IdP without prompting them to tell you where they're from -- you already know that, implicitly, because there's only one valid choice. Just supply the IdP's entityID to the session initiation mechanism.
It's the cross-realm collaborative apps that really need to do discovery, and if you were in that situation, the EDS would be a nice approach.
Thanks,
Nate.
On Aug 9, 2013, at 19:54 , Roy Spectech wrote:
> But since are SP-only, I think we'll be using one Override per
> customer (which matches the one VHOST per customer). Our customers do
> not have that choice as they each only have just one IdP to go to.
More information about the users
mailing list