Discovery Service

[Cantor, Scott]

On 12/22/14, 8:42 PM, "Sathish Anickode" 
<SAnickode at skytouchtechnology.com> wrote:

>I am trying to validate if Weblogic SP can support SAML discovery service 
>protocol. I did not find any information related to this protocol support 
>in Weblogic and waiting on confirmation from Weblogic support.

They won't have any idea what you're talking about.

The protocol itself is just redirects. If there's a way to get the product 
to initiate a login request to a specific IdP, then a discovery service 
can be invoked to cause that to happen, it doesn't matter whether the 
product "supports" the protocol or not.

> 
>If it does support discovery protocol, would an embedded discovery 
>service work or should I be looking into a centralized discovery service?

That's a user interface and technical requirement issue.

>If weblogic does not support discovery protocol, I would like to know if 
>there are any other alternatives that I should look into?

The question doesn't really make any sense phrased that way. There is no 
alternative to discovery except for tricks that make discovery moot, and 
any initiating mechanism in an SP is compatible with the standard 
discovery flow invented by the project because it's all redirects and 
parameters that trigger redirects.

The real question is whether the software can accept responses from more 
than one IdP for the same resource. Some can't. Discovery is nothing more 
than the UI around making that possibility happen.

-- Scott