idp DiscoFeed?

[Cantor, Scott]

> As far as I can tell, the IdP does not provide a discovery feed that can be
> used with the embedded discovery service. Are there any plans to provide
> this in a new version?

If there was enough demand from members using the proxying features in that sort of fashion, it's possible (as would a member decision to actually fund a new SP, since it would have to be reimplemented if we kept the feature there).

We posted an example of using the MDA to do it a long time ago as well.

I wouldn't really advise doing it in a production IdP anyway, for the obvious reason you identified, aggregates of edugain's size are just too large now.

As for your subflow concern, I doubt it's practical if your intent is to drive the EDS, since that's outside the scope of anything the IdP is doing.

> How are folks doing discovery with an IdP running as a proxy (using the
> authn/SAML login method)?

The majority of proxying with our software is for internal use to Azure, etc. I had to actually correct somebody on the fact that we even support true federated proxying already, they thought we didn't. I suppose a lack of an answer for discovery might be a reason, but I don't think there is a good answer.

So...I'd probably use the MDA appliance sample we built, honestly.

https://git.shibboleth.net/view/?p=infra-disco.git;a=summary

It's likely rather out of date however and the MDA has never reached 1.0 status.

-- Scott