how to get an SP to lookup the list of institutions from the ukfederation metadata

Peter Schober peter.schober at univie.ac.at
Thu Sep 10 09:31:05 EDT 2015


* Sunny <ssn at ebi.ac.uk> [2015-09-10 14:54]:
> The IdP is fully integrated with ukfederation i.e. our IdP appears in
> metadata that is downloaded every night. I have an SP and want to use the
> ukfederation metadata so users worldwide can select their home institution
> from the drop down list which will redirect them to their home IdP to
> authenticate - I can manually get it to show the home institution via adding
> info to relying-party.xml but am not sure how to get the SP to lookup the
> ukfederation list.

Sorry for probably not getting it, but if you're asking how to add
SAML Metadata for the UKfederation (and eduGAIN IDPs) to your
Shibboleth SP, here's the UKf's documentation:
http://www.ukfederation.org.uk/content/Documents/Setup2SP
Specifically the section about "MetadataProvider" and "Authenticating
the trust fabric certificate".

If using the Shibboleth EDS you should also add the DiscoveryFilter of
type="Blacklist" to your MetadataProvider, like the (fully functional)
example in the default shibboleth2.xml (or example-shibboleth2.xml).
Doing this will hide IDPs that have opted to not be shown in discovery
interfaces.
-peter


More information about the users mailing list