What is Identity Provider Discovery Service
Identity Provider Discovery Service
When there are multiple Identity Providers the user has to select his Identity Provider. If there is only one Identity Provider then the federation continues as usual. However for use case where there are more than one Identity Provider, the user has to be guided to select his choice of Identity Provider.
In order to be able to see all the Identity partners you will have to implement a landing page where user will select the desired IdP provider. Once user has selected the IdP, your service will redirect the user request to Service Provider and from there on the usual federation will continue with that IdP. So you need to implement a service that will redirect the user to this discovery page which is called as IDP discovery. This is enabled via the wlst command which enables the IdP discovery service. There is no gui setting to enable this service, do it via wlst. Also you may have to uncheck the box "Default Identity Provider Partner"
in the Identity Provider status page (where you create the Identity Provider). I think there was a bug in this selection in 11gR2 PS1, so contact support for details since there is not much documentation available on this.
When there are multiple Identity Providers the user has to select his Identity Provider. If there is only one Identity Provider then the federation continues as usual. However for use case where there are more than one Identity Provider, the user has to be guided to select his choice of Identity Provider.
In order to be able to see all the Identity partners you will have to implement a landing page where user will select the desired IdP provider. Once user has selected the IdP, your service will redirect the user request to Service Provider and from there on the usual federation will continue with that IdP. So you need to implement a service that will redirect the user to this discovery page which is called as IDP discovery. This is enabled via the wlst command which enables the IdP discovery service. There is no gui setting to enable this service, do it via wlst. Also you may have to uncheck the box "Default Identity Provider Partner"
in the Identity Provider status page (where you create the Identity Provider). I think there was a bug in this selection in 11gR2 PS1, so contact support for details since there is not much documentation available on this.
Comments
Post a Comment