Discovery Service

[Sathish Anickode]

Thanks for your detailed explanation. 

> The real question is whether the software can accept responses from more than one IdP for the same resource.

I wanted to confirm if the above statement meant SAML responses returned for the same user from multiple IdP? If so, we do not have a scenario in our line of business where this can occur.

-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: Monday, December 22, 2014 2:03 PM
To: Shib Users
Subject: Re: Discovery Service

On 12/22/14, 8:42 PM, "Sathish Anickode" 
<SAnickode at skytouchtechnology.com> wrote:

>I am trying to validate if Weblogic SP can support SAML discovery 
>service protocol. I did not find any information related to this 
>protocol support in Weblogic and waiting on confirmation from Weblogic support.

They won't have any idea what you're talking about.

The protocol itself is just redirects. If there's a way to get the product to initiate a login request to a specific IdP, then a discovery service can be invoked to cause that to happen, it doesn't matter whether the product "supports" the protocol or not.

> 
>If it does support discovery protocol, would an embedded discovery 
>service work or should I be looking into a centralized discovery service?

That's a user interface and technical requirement issue.

>If weblogic does not support discovery protocol, I would like to know if 
>there are any other alternatives that I should look into?

The question doesn't really make any sense phrased that way. There is no 
alternative to discovery except for tricks that make discovery moot, and 
any initiating mechanism in an SP is compatible with the standard 
discovery flow invented by the project because it's all redirects and 
parameters that trigger redirects.

The real question is whether the software can accept responses from more 
than one IdP for the same resource. Some can't. Discovery is nothing more 
than the UI around making that possibility happen.

-- Scott

-- 
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net