By default eduTEAMS Discovery Service lists all eduGAIN IdPs for user to select from. This is not always desirable and therefore eduTEAMS Discovery Service offers possibility to filter IdPs from the list. This allows SP admin to craft a list (or several lists) specifically targeting the user base of the SP.
Creating the filter - eduTEAMS Filter Generator
The filter is generated using eduTEAMS Filter Generator.
Info | ||||
---|---|---|---|---|
| ||||
https://discovery.eduteams.org/filter.php |
The filter consists of two filtering types.
Allow and Deny lists of entity categories
You may create both allow and deny lists of entity categories.
- If allow list is defined, all IdPs not matching atleast one of the categories on it are filtered out.
- If deny list is defined, all IdPs matching any of the categories on it are filtered out.
Allow or Deny list of IdPs
You may create allow or deny list of IdPs.
- If allow list is defined, all IdPs not on it are filtered out.
- If deny list is defined, all IdPs on it are filtered out.
Info | ||||
---|---|---|---|---|
| ||||
When both entity categories and idp list filters are used together, the list shown comprises of IdPs not filtered out by categories filter with possible additions of IdP allow list or possible deductions of IdP deny list. The assumption is that SP creates the base of the rules using categories filtering and then possible exceptions to those rules by Allow/Deny lists of IdPs. |
Expand | |||||||
---|---|---|---|---|---|---|---|
| |||||||
This example shows how to show only Research and Scolarship IdPs. Navigate to filter generator, https://discovery.eduteams.org/filter.php. Click open the 'select entity categories' - accordion. You should now see all the possible entity categories to choose from in a grey box. Move http://refeds.org/category/research-and-scholarship to green box. Move also http://id.incommon.org/category/research-and-scholarship. At the bottom of the page you should see the resulting filter and it's plaintext version.
|
Applying the filter in discovery request
The filter generated with the tool is set as query string parameter to discovery request. It can be set either by value or by reference.
Filter by value - filter
Code Block |
---|
https://discovery.eduteams.org/wayf.php?filter=eyJhbGxvd0hvc3RlbCI6dHJ1ZSwiYWxsb3dIb3N0ZWxSZWciOnRydWV9Cg== |
Filter by reference - efilter
Code Block |
---|
https://discovery.eduteams.org/wayf.php?efilter=www.example.com/filter |
where contents of www.example.com/filter would be
Code Block |
---|
eyJhbGxvd0hvc3RlbCI6dHJ1ZSwiYWxsb3dIb3N0ZWxSZWciOnRydWV9Cg== |