Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: remove ref to DiscoJuice

...

Manually managing lists of Identity Providers users my chose to may log in from does not scale well and may also not provide a proper user experience. In most cases it's best to implement IDP discovery It will therefore be necessary to deploy some kind of IDP discovery service, using additional software components which allow subjects to easily choose their interfederated preferred IDPs(s) from all those available ones. You can see the following Free/Libre software projects in action at the via interfederation. The eduID.at Demo SP:

In the future there may be other options, including https://seamlessaccess.org/

Contact ACOnet for help with integrating one of these implementations into your website currently demonstrates use of 3 different IDP discovery interfaces.

Fallback discovery services

If all else fails you can make use of one of the central "fallback" discovery interfaces interface provided by ACOnet.

Note
iconfalse

Using the fallback discovery service is not recommended as it sends users away from the service (which may be seen as disrupting the access process) and may confuse users due to different designs at the Service Provider, the central IDP Discovery Service and again at the Identity Provider.

There are 's currently two one central "fallback" IDP Discovery Service avalable within eduID.at which are that's Interfederation-enabled:

Info
iconfalse
titleSWITCHwayf

https://eduid.at/ds/wayf/interfed/

This instance of the SWITCHwayf software may be more familiar to subjects from ACOnet institutions since an older version had versions have been in use at https://wayf.aco.net/ since 2007. This software still works (without its dynamic features) when JavaScript is disabled in the web browser (though not much else on the web will work in such a setup).

 

Info
iconfalse
titleDiscoJuice

https://eduid.at/ds/juice/interfed/

The DiscoJuice software has a more unusual look and feel but also provides additional features such as grouping (and limiting) IDPs by country or sorting suggested IDPs based on their distance from the web browser (via the HTML5 Geolocation API). This DiscoJuice instance does not currently work when JavaScript is disabledSee Discovery Services for more, including references to Seamless Access.

Prepare for missing attributes from IDPs

...