The document discusses DiscoJuice, an open source identity federation discovery service. Key points include: - DiscoJuice has an improved user interface, is written in JavaScript, and has APIs to support flexible deployments. - Options include embedding DiscoJuice or hosting it centrally. A centrally-hosted version could source metadata from multiple federations in parallel and cache results. - DiscoJuice aims to flatten hub-and-spoke federations in the user experience by including all nested institutions without multi-page discovery. - Challenges of a centralized DiscoJuice include reliability and deciding who should host it, such as GÉANT or UN

1. DiscoJuice
Identity Federations
October 20th, Vienna

2. DiscoJuice
✤ Improved User Interface for IdP Discovery.
✤ Written in javascript.
✤ Has a bunch of APIs to be flexible in various architectures and
deployments.
✤ Can be embedded or stand-alone, and central or de-centralized; or a
combined mix.

3. DiscoJuice
✤ First take; somewhat complex to deal with all the deployment
options.
✤ Second take will then be to offer a centrally hosted DiscoJuice,
embedded on service.

4. Additional new features
✤ Can obtain metadata from multiple feeds in parallel
✤ Can support caching of metadata feeds
✤ Wait for all feeds to complete before showing list, to avoid flickering.

5. Flattening cross-federations
✤ Hub and spoke federations a challenge to Discovery
✤ DiscoJuice attempts to flatten the user experience, and include all
nested institutions in the user interface. No more multi-page
discovery.
✤

6. Features of hosted DiscoJuice
✤ Cross-service Memory
✤ Cached metadata and JS across services
✤ Prepared metadata feed from popular federations
✤ Implementations of APIs to lookup geo-locations etc.
✤ Parsing and conversion of SAML 2.0 metadata to JSON

7. Challenges of centrallized DJ
✤ Needs to be very reliable - not more than todays centrallized
discovery services though.
✤ Investigate in CDN technology
✤ Who should host it? GÉANT, UNINETT or ?
✤

8. DiscoJuice.org
✤ Prepared, minified versions offered with gzip.
✤ Different versions available. Automatic upgrades possible!
✤ Parsing and conversion of SAML 2.0 metadata to JSON
✤ Prepared JSON metadata from a bunch of federations
✤ Resizing and caching all MDUI logos.
✤ Implementation of ip to geo-location API

9. discojuice.org

10. Simple install
✤ To install, copy and paste:
<!-- JQuery hosted by Google -->
<script src="//ajax.googleapis.com/ajax/libs/jquery/1.6.4/jquery.min.js" type="text/javascript"></script>
<!-- DiscoJuice hosted by UNINETT at discojuice.org -->
<script type="text/javascript" src="https://engine.discojuice.org/discojuice-stable.min.js"></script>
<link rel="stylesheet" type="text/css" href="https://static.discojuice.org/css/discojuice.css" />
<script type="text/javascript">
DiscoJuice.Hosted.setup(
"a.signon", "Example Showcase service",
"https://service.org/saml2/entityid",
"http://service.org/response.html", ["edugain", "kalmar", "feide"], "http://service.org/login?idp="
);
</script>
✤ Edit the red options for your deployment.

11. DiscoJuice & eduGAIN
✤ Demo URL: http://bridge.uninett.no/edugain.html
✤ Metadata feed for eduGAIN metadata.
✤ Geo location APIs
✤

12. Discovery Architecture
✤ Who should aid Service Providers in improving the discovery
experience?
✤ Discovery Service in eduGAIN?
✤ How to customize the feed of relevant Identity Providers for a SP?