Reverse of IdP Discovery Service

Tom Scavo trscavo at gmail.com
Thu Jan 25 16:40:22 EST 2018


On Thu, Jan 25, 2018 at 4:23 PM, Y Levine <ylevine20 at gmail.com> wrote:
> Is there a reverse of the IdP discovery Service --
> https://www.shibboleth.net/products/embedded-discovery-service/?
>
> I.e. one which can display all services accessible by our IdP?
>
> It's been confusing users on which services they can access with their
> University central credentials  -- so having dynamically listed will be
> great.

As Rainer observed, it depends on the attribute release policy at the
IdP and the authorization rules at the SP. As an IdP operator, one
thing you could do, I suppose, is concentrate on the Research &
Scholarship category of services:

https://incommon.org/federation/info/all-entity-categories.html#SPs

There are quite a few useful services on that list. Does your IdP support R&S?

Tom


More information about the users mailing list