wayf.incommonfederation.org
Mizushima, Marcus
mmizushima at calstate.edu
Fri Jan 17 21:11:37 EST 2014
The Phase 1 Implementation Plan mentions a change for the Discovery Service (https://spaces.internet2.edu/display/InCCollaborate/Phase+1+Implementation+Plan):
"Multiple, heterogeneous services currently run on vhost wayf.incommonfederation.org, namely, Metadata Services and the Discovery Service. To provide better quality of service, these services need to be segregated onto their own vhosts (md.incommon.org and ds.incommon.org, resp.). This will allow us to fine-tune each service according to its requirements."
(found in the "Drivers" section)
But no dates regarding changing the discovery service have been provided and all I've been able to find so far is the same information as Ken did (https://spaces.internet2.edu/display/InCFederation/Shibboleth+Discovery+Config).
I'm assuming that a change will be coming for this in the future, though it would be good if someone from InCommon could clarify.
Marcus
-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Ken Weiss
Sent: Friday, January 17, 2014 3:39 PM
To: Shib Users
Subject: wayf.incommonfederation.org
I'm preparing to update my shibboleth2.xml files to point the MetadataProvider at http://md.incommon.org/InCommon/InCommon-metadata.xml
instead of
http://wayf.incommonfederation.org/InCommon/InCommon-metadata.xml, as required by https://spaces.internet2.edu/display/InCFederation/Metadata+Aggregates.
That seems straightforward.
However, there is also this other element in my shibboleth2.xml file that references wayf.incommonfederation.org:
<SSO discoveryProtocol="SAMLDS"
discoveryURL="https://wayf.incommonfederation.org/DS/WAYF"> SAML2 SAML1 </SSO>
This is exactly what is given as the correct way to "Configure a Shibboleth 2.x SP to use the InCommon Discovery Service with SAML V2.0" at https://spaces.internet2.edu/display/InCFederation/Shibboleth+Discovery+Con
fig. Will that wayf.incommonfederation.org URL remain valid? Or do I also need to update the discoveryURL, and if so, to what?
--Ken
------------------------------------------------------------
Ken Weiss ken.weiss at ucop.edu
UC Office of the President 510-587-6311 (office)
California Digital Library 916-905-6933 (mobile)
UC Curation Center
415 20th Street, 4th Floor
Oakland, CA 94612
--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
More information about the users
mailing list