WAYF alternatives

[Chris Phillips]

Hi Jozef,

Canadian Access Federation(CAF) has dockerized our Discovery Service that
can be reused if interested.
It's based on the great work SWITCH has put into their WAYF and have been
using it for months in production for our central discovery.

To give an idea of what it looks like and how it was customized, I created
2 screenshots just now by pointing it at the CESNET aggregate:

	https://gist.github.com/canariecaf/f5fe6698dd05cc4a8f86f7c556bf53dd

We kept the operation of it as simple as possible but enough to be
flexible as possible so that it can be run with any aggregate:


Presuming you have docker on your machine, you can try it right now.

Commands used to start up the core image of the WAYF:
docker run -e CDS_AGGREGATE=https://metadata.eduid.cz/entities/eduid -e
CDS_REFRESHFREQINMIN=5 -d -p 80:80 --restart=always
canariecaf/docker-cds-core

Then to run the CAF customized image with CESNET aggregate, stop docker,
and run this one:
docker run -e CDS_AGGREGATE=https://metadata.eduid.cz/entities/eduid -e
CDS_REFRESHFREQINMIN=5 -d -p 80:80 --restart=always
canariecaf/docker-cds-caf



The containers can be found here on Docker Hub:
	https://hub.docker.com/r/canariecaf/docker-cds-core/
	https://hub.docker.com/r/canariecaf/docker-cds-caf/

I'll be at TNC17 this year presenting along with other federation peers on
components like this:
https://tnc17.geant.org/core/presentation/33
If you or anyone else want to chat about this in person (or email/vc etc),
just reach out.



Chris.
___________________________________________________________________________
________________
Chris Phillips 
Technical Architect, Canadian Access Federation | CANARIE|
chris.phillips at canarie.ca  |GPG: 0x7F6245580380811D
LinkedIn: http://bit.ly/CPhillipsLinkedIn | skype: chris.phillips.canarie
| twitter: @teamktown
ORCID: orcid.org/0000-0001-5567-4916




On 2017-05-26, 6:32 AM, "users on behalf of Jozef Misutka"
<users-bounces at shibboleth.net on behalf of misutka at ufal.mff.cuni.cz> wrote:

>Dear all,
>
>I would like to ask you about your experience with different WAYF
>solutions (embedded/standalone page that lists IdPs that can be used
>with our SP) .
>When larger inter federations are used, even widely used solutions have
>their issues.
>Developing a new one is relatively easy but we would rather re-use
>existing solution.
>
>Thank you.
>
>Best,
>Jozef
>-- 
>To unsubscribe from this list send an email to
>users-unsubscribe at shibboleth.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5451 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/users/attachments/20170526/13ead73d/attachment.p7s>