Shib3 Login Page - Faking MDUI for SPs who don't specify it

[Martin, Andrew J.]

Good morning fellow Shib users -

We're in the midst of a project to upgrade our aging Shib 2.3.x environment to Shib 3 and some questions have arisen concerning our new login page.

On our previous Shib2 login page, we utilized ECMAScript and file system access to basically store friendly service names for Service Providers that didn't natively provide it in MDUI elements in their metadata, so that we could provide a friendly name in all cases when a user logs in via our IdP. In the absence of a service name, we'd loop through lines of our own .txt file, comparing EntityIDs and print out the value we have stored, or at worst, a "generic" message if no mapping was found.

Now that we're using Shib3 and Velocity Templates, we're basically looking to try to do the same thing, but due to the need to reference an outside file from the filesystem, it looks like we might need to design some custom Java code to do this as the VTL within login.vm doesn't seem to be able to do it on its own.

None of us here are Java programmers - as a result we've come up with the following ideas on our side, but are curious what others might be doing.


1.       The obvious one - figure out how to add a Java class that provides this data to login.vm

or


2.       Use basic VTL language on the login.vm page to do something like the following:

o   #if ($rpContext.getRelyingPartyId() == "somespecificEntityID")

<some html output>

#elseif(($rpContext.getRelyingPartyId() == "someOtherEntityID")

                <some other html output>

#else

                <some generic html output>

#end


                or


3.       Directly edit other SP's metadata locally to force in MDUI elements that the existing login page already understands how to display.



or



4.       Switch back to a JSP login page to use ECMAScript as we were doing before.


Has anyone else dealt with similar questions? What did you choose, and why?

Thanks in advance for any replies.

-Andy


Andy Martin
Systems Developer
Identity and Access Management
Office of Technology Services
Towson University
410-704-4591

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160315/9e3691dc/attachment.html>