Alternatives to DS deployment

Peter Schober peter.schober at univie.ac.at
Tue Jun 18 18:39:13 EDT 2013


* Eric Goodman <Eric.Goodman at ucop.edu> [2013-06-18 23:25]:
> Still, the approach is a list of static URLs that have the IdP/SP
> entityID explicitly or implicitly embedded in it.

You can move the selection of IdPs (provided you need one; if you'll
accept any IDP known via metadata that's pointless) to a metadata
blacklist or whitelist filter which could be argued to be more
"dynamic", but that's still naming the IdPs you [don't] want
explicitly.
If you want even more dynamicity filtering on entity attributes might
be possible (e.g. to only list those IdPs that support the R&S entity
category so you can be pretty sure people will arrive with the
necessary attributes).
No idea what the use case is, so hard to say what's best,
-peter


More information about the users mailing list