Shibboleth Developers

[Chad La Joie <>]

Well, let me say that I don't think one *must* have the login link. 
What I think is important is consistency.  So this means a consistent 
process (I do step 1, then step 2, then step 3 and I'm logged in) as 
well as a consistent UI.

The UI part is what we're trying to address with the EDS.  Some folks in 
the UK federation refer to the DS as the "orange wall" because it's such 
a jarring change from most sites.  IC, not to be outdone, went ahead and 
created a WAYF that, as far as I can tell, tries to be as different from 
any site out there as possible.  In reality though, and I'm sure 
federation people don't like to hear this, the user couldn't care less 
about the federation.  The federation brand is mostly (and should be 
completely) meaningless to them.  It's on those pages just to give some 
bosses a tingly feeling.

On 1/3/11 7:11 AM, Peter Schober wrote:
> * Chad La 
> Joie<>
>   [2011-01-03 12:27]:
> > Rod pointed out, in a separate email to me, that the difference you're
> > talking about might be about what happens prior to loading the page the
> > DS is on.  The Shib DS uses the IdP discovery protocol so a proper DS
> > request needs to be sent to the page.  The SWITCH WAYF has its own
> > internal config options which allows any ol' request to the page to work
> > fine.
> >
> > Rod asked if maybe we should add the ability to configure the
> > properties, normally gotten via the DS request, in the same manner as
> > the Javascript properties.  I think that's fine and would result in the
> > same "render on any ol' request" functionality that the SWITCH WAYF
> > has.
>
> Well, thanks Rod for elaborating. I do think this might make for a
> useful extension, though (like the SWITCH WAYF) it does not really
> align with the kantara/shibEBS discovery model of "put a link titled
> 'login' in the upper right corner" etc.
> cheers,
> -peter

--
Chad La Joie
http://itumi.biz
trusted identities, delivered