Adding own IdP in default DJ configuration

79 views
Skip to first unread message

Michal Prochazka

unread,
Nov 25, 2011, 3:33:29 AM11/25/11
to disco...@googlegroups.com
Hi all,

Is there a simple way to exchange the entry with OpenIdP with my own IdP
which operates in the same way? I'd like to have this IdP on the top of
the list of the IdPs, ideally on the second place after the most
probable one. I'm using DJ version from the SVN head.

Cheers,

Michal P.
--
Michal Prochazka // mic...@ics.muni.cz

CERIT-SC www.cerit.cz
Institute of Computer Science
Masaryk University
Botanicka 68a, 60200 Brno, CZ

CESNET z.s.p.o.
Zikova 4, 16200 Praha 6, CZ

Andreas Åkre Solberg

unread,
Nov 25, 2011, 4:54:24 AM11/25/11
to disco...@googlegroups.com

On 25. nov.2011, at 09:33, Michal Prochazka wrote:

> Hi all,
>
> Is there a simple way to exchange the entry with OpenIdP with my own IdP
> which operates in the same way? I'd like to have this IdP on the top of
> the list of the IdPs, ideally on the second place after the most
> probable one. I'm using DJ version from the SVN head.

A very good question, and I decided to write a very explicit section on this in the documentation:

See section 4 here:

http://discojuice.org/docs/latest/advanced-configuration


The 'inlinemetadata' option is a new option that I added now. However, I added it to the stable track of the hosted DiscoJuice, which means that you do not need to think about upgrading anything - it should just work … :)

I targeted the specific scenario of including an entry for Feide OpenIdP in the example.

Let me know if this did not was unclear or did not solve your problem.

Kind regards,
Andreas

Michal Prochazka

unread,
Nov 25, 2011, 5:21:29 AM11/25/11
to disco...@googlegroups.com
On 11/25/2011 10:54 AM, Andreas Åkre Solberg wrote:
>
> On 25. nov.2011, at 09:33, Michal Prochazka wrote:
>
>> Hi all,
>>
>> Is there a simple way to exchange the entry with OpenIdP with my own IdP
>> which operates in the same way? I'd like to have this IdP on the top of
>> the list of the IdPs, ideally on the second place after the most
>> probable one. I'm using DJ version from the SVN head.
>
> A very good question, and I decided to write a very explicit section on this in the documentation:
>
> See section 4 here:
>
> http://discojuice.org/docs/latest/advanced-configuration
>
>
> The 'inlinemetadata' option is a new option that I added now. However, I added it to the stable track of the hosted DiscoJuice, which means that you do not need to think about upgrading anything - it should just work … :)
>
> I targeted the specific scenario of including an entry for Feide OpenIdP in the example.

Thanks for integrating this feature!

> Let me know if this did not was unclear or did not solve your problem.

If I choose advanced config, it ignores the parametr which specifies the
path to the discojuiceDiscoveryResponse.html, it uses
'/traditional/discovery'. Maybe I'm doing something wrong.

var djc = DiscoJuice.Hosted.getConfig(
"Atlases - HiRes Pathological Images",
"https://atlases.muni.cz/shibboleth",

"https://atlases.muni.cz/dj/discojuice/discojuiceDiscoveryResponse.html", ["cesnet",
"rediris", "kalmar", "arnes", "gakunin", "wayf", "aconet", "switch",
"surfnet2", "aaf", "garr", "surfnet", "renater", "dfn"],
"https://atlases.muni.cz/Shibboleth.sso/Login?target=https://atlases.muni.cz/en/sec/login.cgi&entityID="
);
...

When I use the simple config, everything goes well:

DiscoJuice.Hosted.setup(
"a.signon", "Atlases - HiRes Pathological Images",
"https://atlases.muni.cz/shibboleth",

"https://atlases.muni.cz/dj/discojuice/discojuiceDiscoveryResponse.html", ["cesnet",
"rediris", "kalmar", "arnes", "gakunin", "wayf", "aconet", "switch",
"surfnet2", "aaf", "garr", "surfnet", "renater", "dfn"],
"https://atlases.muni.cz/Shibboleth.sso/Login?target=https://atlases.muni.cz/en/sec/login.cgi&entityID="
);
Cheers,

Michal P.

Andreas Åkre Solberg

unread,
Nov 25, 2011, 6:00:15 AM11/25/11
to disco...@googlegroups.com

On 25. nov.2011, at 11:21, Michal Prochazka wrote:

> If I choose advanced config, it ignores the parametr which specifies the
> path to the discojuiceDiscoveryResponse.html, it uses
> '/traditional/discovery'. Maybe I'm doing something wrong.

If you setup the configuration this way, I may have a look at and see if I can figure out what is wrong :)

Andreas

Michal Prochazka

unread,
Nov 25, 2011, 6:06:41 AM11/25/11
to disco...@googlegroups.com
Done. But be aware that our web server redirects all unknown URLs to the
home page.

Cheers,

Michal P.

Andreas Åkre Solberg

unread,
Nov 25, 2011, 6:49:04 AM11/25/11
to disco...@googlegroups.com

On 25. nov.2011, at 11:21, Michal Prochazka wrote:

> If I choose advanced config, it ignores the parametr which specifies the
> path to the discojuiceDiscoveryResponse.html, it uses
> '/traditional/discovery'. Maybe I'm doing something wrong.

Ah…

Everything in my example was packed inside (even though I did not include it in the doc - I'll fix that)

$(document).ready(function() {
….
});

You need to wrap at least this:

$(document).ready(function() {
$("a.signon").DiscoJuice(djc);
});


Try and see if that solves it.

Andreas

Michal Prochazka

unread,
Nov 25, 2011, 4:38:55 PM11/25/11
to disco...@googlegroups.com
Hi Andreas,

Thanks, it works now. But I have another issue, the logo file of the
defined IdP is loaded from the static.discojuice.org. Would it be
possible to be able to provide e.g. url of the image?

Cheers,

Michal P.

Andreas Åkre Solberg

unread,
Nov 29, 2011, 6:09:50 AM11/29/11
to disco...@googlegroups.com
On 25. nov. 2011, at 22:38, Michal Prochazka wrote:

Thanks, it works now. But I have another issue, the logo file of the
defined IdP is loaded from the static.discojuice.org. Would it be
possible to be able to provide e.g. url of the image?

Ah, right.

DiscoJuice allows you to provide an URL prefix in the 'discoPath' option:

This is automatically set to static.discojuice.org when you are using the getConfig() or setup() functions. You can override this, but currently it is no way to combine the use of hosted icons with self provided ones.

The solution to this would be that I add support for DiscoJuice to not add the 'discoPath' prefix to 'icon' urls that starts with http(s). I'll try to add that soon. Feel free to nag me about it, if I have not fixed in in reasonable time.

Andreas

sokh...@gmail.com

unread,
Apr 14, 2014, 4:34:57 AM4/14/14
to disco...@googlegroups.com, mic...@ics.muni.cz
Hi Michal,

We are piloting our first Federation as South African NREN. I need assistance on adding our own IDP into WAYF service.

Can you please help me.

Michal Prochazka

unread,
Apr 14, 2014, 8:13:16 AM4/14/14
to disco...@googlegroups.com
Hi,

Just go to http://discojuice.org/advanced/ and search for "Adding
entities from other sources".

Cheers,

Michal P.
--
Michal Prochazka // mic...@ics.muni.cz

Institute of Computer Science
Masaryk University
Botanicka 68a, 60200 Brno, CZ

CESNET z.s.p.o.
Zikova 4, 16200 Praha 6, CZ

On 04/14/2014 10:34 AM, sokh...@gmail.com wrote:
> Hi Michal,
>
> We are piloting our first Federation as South African NREN. I need
> assistance on adding our own IDP into WAYF service.
>
> Can you please help me.
>
>
>
> On Friday, November 25, 2011 10:33:29 AM UTC+2, Michal Prochazka wrote:
>
> Hi all,
>
> Is there a simple way to exchange the entry with OpenIdP with my own IdP
> which operates in the same way? I'd like to have this IdP on the top of
> the list of the IdPs, ideally on the second place after the most
> probable one. I'm using DJ version from the SVN head.
>
> Cheers,
>
> Michal P.
> --
> Michal Prochazka // mic...@ics.muni.cz <javascript:>
>
> CERIT-SC www.cerit.cz <http://www.cerit.cz>
> Institute of Computer Science
> Masaryk University
> Botanicka 68a, 60200 Brno, CZ
>
> CESNET z.s.p.o.
> Zikova 4, 16200 Praha 6, CZ
>
> --
> You received this message because you are subscribed to the Google
> Groups "DiscoJuice" group.
> To unsubscribe from this group and stop receiving emails from it, send
> an email to discojuice+...@googlegroups.com
> <mailto:discojuice+...@googlegroups.com>.
> For more options, visit https://groups.google.com/d/optout.

Reply all
Reply to author
Forward
0 new messages