Versions Compared

Old Version 36

changes.mady.by.user Thijs Kinkhorst

Saved on

compared with

New Version 37

changes.mady.by.user Thijs Kinkhorst

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  1. Build yourself or use available solutions? You can either build your own discovery service or use existing options:
    1. For instance, some SAML implementations already have a discovery feature built in.
    2. Use a hosted discovery service. This can be as simple as configuring a URL in your SAML software. Two highly recommended options options that are known to work and free of charge are:
      1.  the eduGAIN discovery service
      2. The Identity Selector Software (thiss.io)
  2. Metadata: the metadata (see previous step) contains the necessary information of all eduGAIN Identity Providers and Service Providers (such as the name of the Identity Provider, a logo (optional), the technical endpoints, etc.). If your service is only accessible to certain Identity Providers, you might want to apply some filtering (by white- or blacklisting).
  3. The discovery page itself: using the (processed) metadata, you can now implement a webpage that shows all Identity Providers to the user which are available for logging in. You are completely free to design and implement a discovery page the way you like it. However, there are some do's and don'ts that are mainly about usability listed on the REFEDS website. Please read those before you start working on the discovery page.

...