SP's description vs entityID as URL
Peter Schober
peter.schober at univie.ac.at
Tue Oct 6 05:28:59 EDT 2015
* Szerb, Tamas <toma at rulez.org> [2015-10-06 11:01]:
> https://wiki.shibboleth.net/confluence/display/SHIB2/IdPAuthUserPassLoginPage
>
> the <idpui:serviceName/> is the only tag to represent the SP's entityID, or
> is there any other way?
If you wanted to show the entityID itself even though the Metadata
for the SP also has more palatable information available you could
also get it from the request context.
> To have a description of the SP in its metadata, what would be the
> proper way to represent it in the login page of IdP, while we'd keep
> the entityID as URL for the given SP?
The wiki page you quote above lists all the canonical places.
> as I see, the <idpui:serviceName/> would fall back to DisplayName, then
> ServiceName so if they're filled, I can't show the entityID, besides that
> I'd like to show the SP's textual name.
You should pronbably never show entityIDs to subjects using your IDP.
> Is the proper solution to use <idpui:organizationName> for that and
> creating in SP metadata the related Organization/OrganizationName or
> OrganizationDIsplayName?
No. The org running/owning/controlling a service is yet again
different from the service (name) itself.
-peter
More information about the users
mailing list