With the update to IdentityProvider 3.3, the RWTH Aachen central Discovery Service (DS) is no longer available. To limit the choice of identity providers in the future, you can use the Shibboleth Embedded Discovery Service (EDS).

Embedded Discovery Service (EDS)

The EDS is a set of Java scripts that can be embedded in any HTML pages and works with the discovery feed generated by the Shibboleth SP from version 2.4 (/Shibboleth.sso/DiscoFeed). This is (IdP) data in JSON format that is generated from the metadata available via one or more MetadataProvider elements - after applying any MetadataFilters, e.g. a whitelist of entity IDs of authorized IdPs or an Entity Category. In this way, an entity selection can be realized with little effort, which only contains IdPs of entities whose users should have access to the service protected by the ServiceProvider (SP).

The official documentation for the EDS can be found in the Shibboleth Wiki (opens in new tab).

Here is a short guide on how to install the EDS yourself:

• Download under http://shibboleth.net/downloads/embedded-discovery-service/latest/ (opens in new tab)
• Only the following files from the downloaded ZIP file are required: idpselect_config.js, idpselect.js und ggf. index.html
• Copy files to the web server directory (usually under /var/www/html)
• Adjust index.html to your own requirements or create a separate page in which the JavaScript calls are embedded. See the comments in index.html and the official documentation (opens in new tab)
  •  For the <noscript> element, the link to a central WAYF/DS is recommended; documentation on the central Discovery Services of the DFN can be found here (opens in new tab)
• Specific adjustments must be made in idpselect_config.js and, if necessary, idpselect.css, see the comments in the relevant files and the official documentation (opens in new tab)

Configuration of the ServiceProvider (usually under /etc/shibblet/shibboleth2.xml):

Configuration of the Web Server

Add to VHost configuration: