Shibboleth Developers

[Chad La Joie <>]

Rod pointed out, in a separate email to me, that the difference you're 
talking about might be about what happens prior to loading the page the 
DS is on.  The Shib DS uses the IdP discovery protocol so a proper DS 
request needs to be sent to the page.  The SWITCH WAYF has its own 
internal config options which allows any ol' request to the page to work 
fine.

Rod asked if maybe we should add the ability to configure the 
properties, normally gotten via the DS request, in the same manner as 
the Javascript properties.  I think that's fine and would result in the 
same "render on any ol' request" functionality that the SWITCH WAYF has.

On 12/31/10 5:09 PM, Peter Schober wrote:
> * Peter 
> Schober<>
>   [2010-12-31 22:51]:
> > > Actually, the Shib EDS works the same as the SWITCH WAYF.  Just
> > > Javascript and CSS that you add to an HTML page.  The Shib EDS happens
> > > to get its data from the SP, the SWITCH one happens to get it from the
> > > centralized DS.
> >
> > I failed to embed the Shib EDS into a page. I could only let it live
> > on some other page on the same vhost to where a HTTP redirect takes
> > place.
> > The SWITCH DS lives "inside" an unprotected page, OTOH.
>
> See https://saml-test.aco.net/ for what I mean.
> AFAIU you can't do that with the Shib EDS? Only redirect to some other
> page on that vhost (via Shib SP flows)?
> -peter

--
Chad La Joie
http://itumi.biz
trusted identities, delivered