The document discusses DiscoJuice, an open source identity federation discovery service. Key points include:
- DiscoJuice has an improved user interface, is written in JavaScript, and has APIs to support flexible deployments.
- Options include embedding DiscoJuice or hosting it centrally. A centrally-hosted version could source metadata from multiple federations in parallel and cache results.
- DiscoJuice aims to flatten hub-and-spoke federations in the user experience by including all nested institutions without multi-page discovery.
- Challenges of a centralized DiscoJuice include reliability and deciding who should host it, such as GÉANT or UN
2. DiscoJuice
✤ Improved User Interface for IdP Discovery.
✤ Written in javascript.
✤ Has a bunch of APIs to be flexible in various architectures and
deployments.
✤ Can be embedded or stand-alone, and central or de-centralized; or a
combined mix.
3. DiscoJuice
✤ First take; somewhat complex to deal with all the deployment
options.
✤ Second take will then be to offer a centrally hosted DiscoJuice,
embedded on service.
4. Additional new features
✤ Can obtain metadata from multiple feeds in parallel
✤ Can support caching of metadata feeds
✤ Wait for all feeds to complete before showing list, to avoid flickering.
5. Flattening cross-federations
✤ Hub and spoke federations a challenge to Discovery
✤ DiscoJuice attempts to flatten the user experience, and include all
nested institutions in the user interface. No more multi-page
discovery.
✤
6. Features of hosted DiscoJuice
✤ Cross-service Memory
✤ Cached metadata and JS across services
✤ Prepared metadata feed from popular federations
✤ Implementations of APIs to lookup geo-locations etc.
✤ Parsing and conversion of SAML 2.0 metadata to JSON
7. Challenges of centrallized DJ
✤ Needs to be very reliable - not more than todays centrallized
discovery services though.
✤ Investigate in CDN technology
✤ Who should host it? GÉANT, UNINETT or ?
✤
8. DiscoJuice.org
✤ Prepared, minified versions offered with gzip.
✤ Different versions available. Automatic upgrades possible!
✤ Parsing and conversion of SAML 2.0 metadata to JSON
✤ Prepared JSON metadata from a bunch of federations
✤ Resizing and caching all MDUI logos.
✤ Implementation of ip to geo-location API
12. Discovery Architecture
✤ Who should aid Service Providers in improving the discovery
experience?
✤ Discovery Service in eduGAIN?
✤ How to customize the feed of relevant Identity Providers for a SP?