Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Service Providers should need to implement IDP discovery, i.e., allowing subjects to choose their Identity Provider from all available/desirable ones, the Identity Provider they want to log in with. Ideally that's done by integrating it within their application. See , see the REFEDS Discovery Guide for details on why and how.

ACOnet currently recommends using one of these Free/Libre software projects, which can be integrated with most any software or website:

...

  •  (HTML/JS- only, fully stand-alone, easiest when also using the Shibboleth SP software)
  • SWITCHwayf (PHP server software; its "embedded" integration method via HTML/JS-only still requires a full SWITCHwayf instance elsewhere, though ACOnet provides one such instance)
  • The "Standard" integration method with the SeamlessAccess service (HTML/JS-only integration with an external service not provided by ACOnet)

Panel
titleEmbedded IDP Discovery Demo

See SAML Demo SP, section "IDP Discovery Services" , for demos descriptions of several systems plus of the "fallback" SWITCHwayf softwarethe several methods demonstrated by the eduID.at Demo SP.

Contact ACOnet for help questions with regard to integrating IDP discovery into your eduID.at Service Provider. 

Note
iconfalse

If your services are still using the legacy Discovery Service at https://wayf.aco.net/ please update the URL to one of the services below.

Fallback discovery services

...

The SWITCHwayf software may be more familiar to subjects from ACOnet participant institutions since an older version had versions of that have been in use at https://wayf.aco.net/ since at since 2007. This software still works (without its more dynamic features) when JavaScript is disabled in the web browser (though not much else on the web will work in such a setup):

...

Info
iconfalse
titleSWITCHwayf with ACOnet-registered IDPs plus Interfederation IDPs

https://eduid.at/ds/wayf/interfed/

An alternative, external fallback IDP discovery service is the SeamlessAccess one, when used in their "Limited" integration method.