Discovery Service

[Eric Goodman]

>Unless Weblogic has been seriously reworked in its 
>dealings with SAML (2) then it will not handle discovery 
>nor dealing with multiple providers well, or at all from 
>what I recall.

>You could of course add OIF into the mix which is the 
>“federating” piece of the O stack, multiple IdPs and such.

In theory, the OAM r2 of the current O stack handles discovery and multiple IdPs (they folded OIF in to OAM in that last release), but the claimed functionality is new in the last year or so. Previously I believe the OIF/OAM solution for multiple IdPs was multiple SPs/OIF entry points in front of the same protected application. In our PeopleSoft integration, we're not looking to use the OAM discovery service and are instead looking at using an SSP proxy to host the discovery service and proxy the communications. (We're not putting Shibboleth directly on the Weblogic elements for reasons that are probably not worth going into here).

--- Eric