Discovery Service

[Sathish Anickode]

I wanted to clarify that I am not using OAM currently nor planning to go that route in the future. I am only looking into integrating a SP running in Weblogic application server with Shibboleth and an external IdP.

Does multiple IdP's work with Spring Security SAML SP or would it encounter similar problems?

-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Eric Goodman
Sent: Monday, December 22, 2014 5:33 PM
To: Shib Users
Subject: RE: Discovery Service

>Unless Weblogic has been seriously reworked in its dealings with SAML 
>(2) then it will not handle discovery nor dealing with multiple 
>providers well, or at all from what I recall.

>You could of course add OIF into the mix which is the “federating” 
>piece of the O stack, multiple IdPs and such.

In theory, the OAM r2 of the current O stack handles discovery and multiple IdPs (they folded OIF in to OAM in that last release), but the claimed functionality is new in the last year or so. Previously I believe the OIF/OAM solution for multiple IdPs was multiple SPs/OIF entry points in front of the same protected application. In our PeopleSoft integration, we're not looking to use the OAM discovery service and are instead looking at using an SSP proxy to host the discovery service and proxy the communications. (We're not putting Shibboleth directly on the Weblogic elements for reasons that are probably not worth going into here).

--- Eric

--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net