Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

For Service Providers connected to SURFconext, a default discovery page automatically appears when users want to login to your service. This will remain so as long as you use (one of the ) the default metadata URLs URL offered by SURFconext. These are:

With this metadata configured, your Service Provider only has 1 Identity Provider, namely SURFconext. SURFconext then automatically redirects the user to a built in discovery page.

...

  1. Build yourself or use available solutions? You can either build your own discovery service or use existing options. :
    1. For instance, some SAML implementations already have a discovery feature built in.
    2. Another highly recommendable option is to use the eduTEAMS Discovery Service developed by GÉANT. Please refer to https://wiki.geant.org/display/ED/Discovery+Service for more information.
  2. Metadata: the metadata (see previous step) contains the necessary information of all eduGAIN Identity Providers and Service Providers (such as the name of the Identity Provider, a logo (optional), the technical endpoints, etc.). If your service is only accessible to certain Identity Providers, you might want to apply some filtering (by white- or blacklisting).
  3. The discovery page itself: using the (processed) metadata, you can now implement a webpage that shows all Identity Providers to the user which are available for logging in. You are completely free to design and implement a discovery page the way you like it. However, there are some do's and don'ts that are mainly about usability listed on the REFEDS website. Please read those before you start working on the discovery page.

...

By not specifying a particular Identity Provider SimpleSAMLphp will automatically show a built-in discovery page.

3. The default discovery service is likely too basic for your needs. Consider using a different module, e.g. the discopower module.

4. Edit the look-and-feel of the discovery page to suit your needs. Generally it is recommended to use the same styling as the rest of your service, to make sure users do net get confused too much. To read more about changing the look-and-feel of the SimpleSAMLphp discovery page, please look at: https://simplesamlphp.org/docs/stable/simplesamlphp-theming.

...