Page tree

Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

The eduTEAMS Discovery Service is recommended to be used in embedded fashion because this is generally more user-friendly as the organisation selection is integrated directly into the service's web page. For that this to work, the authentication needs to be triggered from a page that includes javascript that where an included Javascript provides the functionality . Here we provide to show the embedded Discovery Service. On this page examples for Shibboleth SP and SimpleSAMLphp are provided.

Shibboleth SP

In the this example we first configure the eduTEAMS discovery Discovery Service to be used by the default Shibboleth login handler.

Code Block
titlefile:/etc/shibboleth/shibboleth2.xml
<SSO
    discoveryProtocol="SAMLDS" 
    discoveryURL="https://discovery.eduteams.org/wayf.php">
    SAML2 SAML1 
</SSO>

If you To use the discovery in embedded fashion you need to include javascript in  head element on the service as embedded version, include the following Javascript in the head element if the web page triggering the authentication,:

Code Block
titleIncluding javascript
<head>
    <!-- HTML elements -->
    <script type="text/javascript" src="https://discovery.eduteams.org/ds.js"></script>
    <!-- HTML elements -->
</head>

...

As a result the discovery service is shown in embedded fashionas embedded version directly on the embedding web page.

SimpleSAMLphp

In the this example we first set eduTEAMS discovery to be used by default sp configuration.

Code Block
titleauthsources.php
'default-sp' => array(
    'saml:SP',
    'entityID' => 'https://sp.example.com/simplesaml/',
    'idp' => NULL,
    'discoURL' => 'https://discovery.eduteams.org/wayf.php',
    'privatekey' => 'example.key'
),

If you To use the discovery in embedded fashion you need to include javascript service as embedded version include the following Javascript in  head element on the page triggering the authentication,

Code Block
titleIncluding javascript
<head>
    <!-- HTML elements -->
    <script type="text/javascript" src="https://discovery.eduteams.org/ds.js"></script>
    <!-- HTML elements -->
</head>

and then display a an element triggering the authentication.

...