Omitting the DiscoveryService?

[Imbemba, Pasqualino]

Hello all,

does the Shibboleth architecture foresee the possibility to omit the 
discoveryService at all, i.e.

1) intercept and redirect to the correct IdP from the logged user session?
2) even without providing credentials?

Example:
User foo logs into a PC in domain bar and then accesses a webresource 
protected with Shibboleth - without providing IdP (although the 
application is shared with other organizations) and username/password. 
In other words: the SP is configured to understand (at least) where 
requests are coming from and if/how user is validated.

Thank you.

#pasquale

-- 


------------------------------------------------------------------------

Pasqualino Imbemba

Amt für technisch-wirtschaftliche Informatik 9.4 Ufficio Informatica
tecnica-economica

Tel +39 0471 566164 / +39 0474 582246