Panel

bgColor	#f8f8f8
title	Important Note

The DSX Discovery Service (formerly known as eduTEAMS Discovery Service (Disco) allows services to implement an (embedded) identity provider discovery.Identity Provider discovery.

Currently, the service is in a pilot phase. The pilot phase ends end 2020. After December 31st 2020, the service will be decomissioned. We recommend to have a look at the GÉANT-operated Seamless Access Discovery Service service as alternative.

This section contains functional and technical documentation on how to use the discovery service if you are a administrator of a service.

Note

The discovery service is not yet available for public use, it will be included in the 1.1. release of eduTEAMS (scheduled at Okt 31, 2017)

SAML2 based federations consist of services represented by Service Providers (SP) and Home Organizations represented by Identity Providers (IdP). Services rely on Home Organizations to identify the users and for that to happen, the services usually need to be able to direct the user to correct Home Organization. The number of Home Organizations is - particularly in eduGAIN - so vast that users potentially have to select their Home Organization from a long list of organizations which can access a particular service. Showing this (long) list of Home Organizations requires a so-called Identity Provider Discovery Service. Instead of operating a Discovery Service itself, a service operator can rely on a central Discovery Service, which is operated by a third party. A centrally maintained Discovery Service offers users a list of Home Organizations to pick from.

In the following we describe one particular Discovery Service for eduGAIN, the eduTEAMS DSX Discovery Service.

...

DSX Discovery Service

The eduTEAMS DSX Discovery service is one of several service components that form the GÉANT eduTEAMS service. Even though the name implies it, the eduTEAMS Discovery Service is not limited to be used by eduTEAMS services but in fact can be used by all eduGAIN Service Providers.

Image Removed

general-purpose SAML2 Discovery Service available to all services that are part of the interfederation service eduGAIN.

Image Added

If you want to see the Discovery Service in action. Have a look at this DSX Discovery Service Demo, which shows all IdPs that have the

GÉANT Data Protection Code of Conduct or the REFEDS Research & Scholarship entity categories but hides all IdPs that have the Hide-From-Discovery entity category.

Benefits of the DSX

...

Discovery Service

Modern SAML2-compliant Discovery Service implementation
Hosted in a high availability infrastructure of 3 or more nodes
Available to all eduGAIN Service Providers for free
Very simple to integrate into a SP web page thanks to embedded Discovery Service Javascript
Support for many languages (if your language is not yet supported and you would like to contribute, please contact support@eduteams support@edugain.org)
Allows custom-tailoring list of IdPs based on SAML entity categories or with black/white listing individual IdPs.

Target User of

...