Centralized Discovery Service - "The Discovery Service should not be called directly"

[Cantor, Scott]

On 7/23/14, 1:22 PM, "Christian Munive" <christian.munive at gmail.com> wrote:

>Hi everyone. I'm new to the user list. I'm trying to set up a federation
>in my country; I've succesfully installed a test IdP and a test SP (with
>embedded DS)... but I'm having problems setting up a centralized
>discovery service.

You might just rethink doing it, they introduce a large number of problems
and create misconceptions. Discovery can't be moved that far from a
service without making assumptions that don't hold in practice.

>Now, on the side of the SP, this is the content of the shibboleth2.xml
>file:

>                        <SSO discoveryProtocol="SAMLDS"
>                  
>discoveryURL="https://cdsserver.inca.net.pe/cds/index.htm">

That's not the location of a CDS endpoint. That should point to /WAYF not
index.htm

-- Scott