SlideShare ist ein Scribd-Unternehmen logo
1 von 31
SP Branding in IdP Discovery & Login Rod Widdowson
Who am I, Why am I here? Primarily a developer: Extensive Discovery experience. Deeply involved in all the examples you’ll see today.
Take aways from this talk There is a very easy way you can massively help usability.  Please do it. Their is an easy way to make significant further improvments.  Please investigate at least.
Branding, Co-branding What is Branding? What is co-branding? Why does it matter? An example.
Start at the SP
Go to the DS
Thence to the IdP
A Bad Login experience No continuity of story. Each page is constructed in isolation. Branding, where present, is to do with “me”. Irrelevant branding present. No forward or backward reference. Result: confusion.
What can we do? (1) Developers & Operators (that’s me!) Unclutter the discovery GUI. Allow for forwards and backwards references. Give a continuity of experience. Branding (where appropriate). Cobranding (everywhere).
What can we do? (2) SPs (that’s you) Make branding available: Pictures Names Words An example:
SP
Centralized Discovery Service
IdP
This looks good.  Can I play? Yes and it is easy. NO software changes (for SPs) Just send a mail to service@ukfederation.org.uk asking to add your logos But you should read (http://www.ukfederation.org.uk/content/Documents/MDUIRecommendations) As well (http://tinyurl.com/6xgejes) But I’ll summarise:
Adding a logo The logo is on your website. It has to be https:// protected. There are size constraints: Width between 64px and 350px. Height between 64px and 170px.  Format constraints. PNG or GIF. Logo background (if any) should be transparent.
Adding words & a name The Name should be meaningful and short: “Foobar Scientific Journals.” The Description should be a brief phrase “Online access to all publications of Foobar inc since 1892.”
Is that it? In a word  yes. If you want, you can Add more logos Text in different languages  Other interesting stuff ... But you don’t have to.
Embedded Discovery Why it’s easy to take control
Why build your own discovery? Using a Centralised Discovery Service means: The wrong IdP list: Too many IdPs to select from. Not enough IdPs to select from. No control. Although the new co-branding helps. It isn’t your website. We have always recommended SPs deploy their own Discovery Service.
Building your own discovery: old style Although was recommended it was hideously hard: Install Java Install another web server (Tomcat) Configure the GUI in this strange JSP thing. And keep it working. The example website was, at best, impenetrable.
Why this sucked. Hard work. New and alien technology Metadata drift. The CDS was “good enough” Little return for significant effort. Diverse look and feel. And yet many brave souls got it working.
There must be a better way Requirements: Easy to use. Easy to plagiarize examples. No new server side technology. Less than an hour to get done. We believe that we’ve met them.
Embedded Discovery Service No new server (its all part of the SP software) So no metadata drift. No new technology, just HTML. It is a page you own And is yours to brand. Lots of other cool stuff. Another demo
SP
Embedded Discovery Service
IdP
What is involved? Add some static pages to your web servers. Add the new pages: Add some templated stuff. Make it look liker your other pages. Configure Trivial for the SP configuration. Nonexistent/trivial for the web page. You are done. It is a bug this was not easy.
Required Software Shibboleth: Latest release OASP: Next release (but speak to the vendor) Guanxi: Current release? (but speak to the vendor) Others: Put me in touch.
Take aways from this talk There is a very easy way you can massively help usability.  Please do it. Its just one mail message after all. Their is an easy way to make significant further improvments.  Please investigate. Rod Widdowson rdw@steadingsoftware.com
Questions? Discussion? Rod Widdowsonrdw@steadingsoftware.com
Questions?  Discussion?

Weitere ähnliche Inhalte

Andere mochten auch

Git 程式碼版本控制軟體介紹
Git 程式碼版本控制軟體介紹Git 程式碼版本控制軟體介紹
Git 程式碼版本控制軟體介紹PingLun Liao
 
Bab 9 analisa_smbr_dana
Bab 9 analisa_smbr_danaBab 9 analisa_smbr_dana
Bab 9 analisa_smbr_danaInal Ypyn
 
Go Beast Mode with Realtime Reactive Interfaces in Angular 2 and Firebase
Go Beast Mode with Realtime Reactive Interfaces in Angular 2 and FirebaseGo Beast Mode with Realtime Reactive Interfaces in Angular 2 and Firebase
Go Beast Mode with Realtime Reactive Interfaces in Angular 2 and FirebaseLukas Ruebbelke
 
GEOGRAFIA - La cucina della Spagna
GEOGRAFIA - La cucina della SpagnaGEOGRAFIA - La cucina della Spagna
GEOGRAFIA - La cucina della Spagnascrivarolo13
 
Resume_Rushikesh_Network Engineer
Resume_Rushikesh_Network EngineerResume_Rushikesh_Network Engineer
Resume_Rushikesh_Network EngineerRishikesh Waghmare
 
Angular 2.0 Routing and Navigation
Angular 2.0 Routing and NavigationAngular 2.0 Routing and Navigation
Angular 2.0 Routing and NavigationEyal Vardi
 
From analyses to successful Implementation
From analyses to successful ImplementationFrom analyses to successful Implementation
From analyses to successful ImplementationSPC Adriatics
 
Inquinamento e rischi idrogeologici in Liguria
Inquinamento e  rischi idrogeologici in LiguriaInquinamento e  rischi idrogeologici in Liguria
Inquinamento e rischi idrogeologici in Liguriascrivarolo13
 
L'inquinamento idrico
L'inquinamento idricoL'inquinamento idrico
L'inquinamento idricoscrivarolo13
 
Chronic toxicity studies a brief outlook
Chronic toxicity studies a brief outlookChronic toxicity studies a brief outlook
Chronic toxicity studies a brief outlookRxVichuZ
 
Step 2 CK Presentation with Dr. Tao Le
Step 2 CK Presentation with Dr. Tao LeStep 2 CK Presentation with Dr. Tao Le
Step 2 CK Presentation with Dr. Tao Lefirstaidusmlerx
 
我的GCM時代-推送訊息的實做分享
我的GCM時代-推送訊息的實做分享我的GCM時代-推送訊息的實做分享
我的GCM時代-推送訊息的實做分享Morning Kao
 

Andere mochten auch (18)

Git 程式碼版本控制軟體介紹
Git 程式碼版本控制軟體介紹Git 程式碼版本控制軟體介紹
Git 程式碼版本控制軟體介紹
 
ASCPcertificate
ASCPcertificateASCPcertificate
ASCPcertificate
 
Bab 9 analisa_smbr_dana
Bab 9 analisa_smbr_danaBab 9 analisa_smbr_dana
Bab 9 analisa_smbr_dana
 
Normas apa (1)
Normas apa (1)Normas apa (1)
Normas apa (1)
 
Rxjava pratique
Rxjava pratiqueRxjava pratique
Rxjava pratique
 
Go Beast Mode with Realtime Reactive Interfaces in Angular 2 and Firebase
Go Beast Mode with Realtime Reactive Interfaces in Angular 2 and FirebaseGo Beast Mode with Realtime Reactive Interfaces in Angular 2 and Firebase
Go Beast Mode with Realtime Reactive Interfaces in Angular 2 and Firebase
 
GEOGRAFIA - La cucina della Spagna
GEOGRAFIA - La cucina della SpagnaGEOGRAFIA - La cucina della Spagna
GEOGRAFIA - La cucina della Spagna
 
Resume_Rushikesh_Network Engineer
Resume_Rushikesh_Network EngineerResume_Rushikesh_Network Engineer
Resume_Rushikesh_Network Engineer
 
Angular 2.0 Routing and Navigation
Angular 2.0 Routing and NavigationAngular 2.0 Routing and Navigation
Angular 2.0 Routing and Navigation
 
From analyses to successful Implementation
From analyses to successful ImplementationFrom analyses to successful Implementation
From analyses to successful Implementation
 
Inquinamento e rischi idrogeologici in Liguria
Inquinamento e  rischi idrogeologici in LiguriaInquinamento e  rischi idrogeologici in Liguria
Inquinamento e rischi idrogeologici in Liguria
 
L'inquinamento idrico
L'inquinamento idricoL'inquinamento idrico
L'inquinamento idrico
 
Angular 2 observables
Angular 2 observablesAngular 2 observables
Angular 2 observables
 
Sejarah Manusia Purba
Sejarah Manusia PurbaSejarah Manusia Purba
Sejarah Manusia Purba
 
Chronic toxicity studies a brief outlook
Chronic toxicity studies a brief outlookChronic toxicity studies a brief outlook
Chronic toxicity studies a brief outlook
 
Step 2 CK Presentation with Dr. Tao Le
Step 2 CK Presentation with Dr. Tao LeStep 2 CK Presentation with Dr. Tao Le
Step 2 CK Presentation with Dr. Tao Le
 
Procedural sedation 1
Procedural sedation 1Procedural sedation 1
Procedural sedation 1
 
我的GCM時代-推送訊息的實做分享
我的GCM時代-推送訊息的實做分享我的GCM時代-推送訊息的實做分享
我的GCM時代-推送訊息的實做分享
 

Ähnlich wie Sp branding in idp discovery & login

Discovery refeds 11
Discovery refeds 11Discovery refeds 11
Discovery refeds 11refeds
 
proper care and feeding for your junior developer
proper care and feeding for your junior developerproper care and feeding for your junior developer
proper care and feeding for your junior developerEric St
 
How To Do Kick-Ass Software Development
How To Do Kick-Ass Software DevelopmentHow To Do Kick-Ass Software Development
How To Do Kick-Ass Software DevelopmentSven Peters
 
Don't hate, automate. lessons learned from implementing continuous delivery
Don't hate, automate. lessons learned from implementing continuous deliveryDon't hate, automate. lessons learned from implementing continuous delivery
Don't hate, automate. lessons learned from implementing continuous deliverySolano Labs
 
JAZOON'13 - Sven Peters - How to do Kick-Ass Software Development
JAZOON'13 - Sven Peters - How to do Kick-Ass Software DevelopmentJAZOON'13 - Sven Peters - How to do Kick-Ass Software Development
JAZOON'13 - Sven Peters - How to do Kick-Ass Software Developmentjazoon13
 
Recipe of a rockstar developer
Recipe of a rockstar developerRecipe of a rockstar developer
Recipe of a rockstar developerTopu Newaj
 
Enterprise Devops Presentation @ Magentys Seminar London May 15 2014
Enterprise Devops Presentation @ Magentys Seminar London May 15 2014Enterprise Devops Presentation @ Magentys Seminar London May 15 2014
Enterprise Devops Presentation @ Magentys Seminar London May 15 2014Jwooldridge
 
Dev Ops Essentials Course
Dev Ops Essentials CourseDev Ops Essentials Course
Dev Ops Essentials CourseUse DevOps
 
Design Types
Design TypesDesign Types
Design Types1&1
 
How To Do Kick-Ass Software Development, by Sven Peters
How To Do Kick-Ass Software Development, by Sven PetersHow To Do Kick-Ass Software Development, by Sven Peters
How To Do Kick-Ass Software Development, by Sven PetersZeroTurnaround
 
The Way We Start Our Transformation Journey
The Way We Start Our Transformation JourneyThe Way We Start Our Transformation Journey
The Way We Start Our Transformation JourneyDevOps Indonesia
 
Kickass Agile Development - Agile & Beyond Conference
Kickass Agile Development - Agile & Beyond ConferenceKickass Agile Development - Agile & Beyond Conference
Kickass Agile Development - Agile & Beyond ConferenceDan Chuparkoff
 
Framer for the win - Using Framer prototypes for your app project. (For Melbo...
Framer for the win - Using Framer prototypes for your app project. (For Melbo...Framer for the win - Using Framer prototypes for your app project. (For Melbo...
Framer for the win - Using Framer prototypes for your app project. (For Melbo...Jinju Jang
 
10 days of Nuracode
10 days of Nuracode10 days of Nuracode
10 days of Nuracodecovello
 
Strange but True: Counterintiutive Paths to Building a Business on APIs
Strange but True: Counterintiutive Paths to Building a Business on APIsStrange but True: Counterintiutive Paths to Building a Business on APIs
Strange but True: Counterintiutive Paths to Building a Business on APIsThomas Bouldin
 
How agile is rails
 How agile is rails How agile is rails
How agile is railsJosé Mota
 
Full-Stack Developer_Tech Talk_August 13
Full-Stack Developer_Tech Talk_August 13Full-Stack Developer_Tech Talk_August 13
Full-Stack Developer_Tech Talk_August 13ITviec
 
What is a Full stack developer? - Tech talk
What is a Full stack developer? - Tech talk What is a Full stack developer? - Tech talk
What is a Full stack developer? - Tech talk Bui Hai An
 
Collaboration Beyond Code
Collaboration Beyond CodeCollaboration Beyond Code
Collaboration Beyond CodeDavid E. Weekly
 
8 employer branding must-haves to engage developers
8 employer branding must-haves to engage developers8 employer branding must-haves to engage developers
8 employer branding must-haves to engage developersTaras Makh
 

Ähnlich wie Sp branding in idp discovery & login (20)

Discovery refeds 11
Discovery refeds 11Discovery refeds 11
Discovery refeds 11
 
proper care and feeding for your junior developer
proper care and feeding for your junior developerproper care and feeding for your junior developer
proper care and feeding for your junior developer
 
How To Do Kick-Ass Software Development
How To Do Kick-Ass Software DevelopmentHow To Do Kick-Ass Software Development
How To Do Kick-Ass Software Development
 
Don't hate, automate. lessons learned from implementing continuous delivery
Don't hate, automate. lessons learned from implementing continuous deliveryDon't hate, automate. lessons learned from implementing continuous delivery
Don't hate, automate. lessons learned from implementing continuous delivery
 
JAZOON'13 - Sven Peters - How to do Kick-Ass Software Development
JAZOON'13 - Sven Peters - How to do Kick-Ass Software DevelopmentJAZOON'13 - Sven Peters - How to do Kick-Ass Software Development
JAZOON'13 - Sven Peters - How to do Kick-Ass Software Development
 
Recipe of a rockstar developer
Recipe of a rockstar developerRecipe of a rockstar developer
Recipe of a rockstar developer
 
Enterprise Devops Presentation @ Magentys Seminar London May 15 2014
Enterprise Devops Presentation @ Magentys Seminar London May 15 2014Enterprise Devops Presentation @ Magentys Seminar London May 15 2014
Enterprise Devops Presentation @ Magentys Seminar London May 15 2014
 
Dev Ops Essentials Course
Dev Ops Essentials CourseDev Ops Essentials Course
Dev Ops Essentials Course
 
Design Types
Design TypesDesign Types
Design Types
 
How To Do Kick-Ass Software Development, by Sven Peters
How To Do Kick-Ass Software Development, by Sven PetersHow To Do Kick-Ass Software Development, by Sven Peters
How To Do Kick-Ass Software Development, by Sven Peters
 
The Way We Start Our Transformation Journey
The Way We Start Our Transformation JourneyThe Way We Start Our Transformation Journey
The Way We Start Our Transformation Journey
 
Kickass Agile Development - Agile & Beyond Conference
Kickass Agile Development - Agile & Beyond ConferenceKickass Agile Development - Agile & Beyond Conference
Kickass Agile Development - Agile & Beyond Conference
 
Framer for the win - Using Framer prototypes for your app project. (For Melbo...
Framer for the win - Using Framer prototypes for your app project. (For Melbo...Framer for the win - Using Framer prototypes for your app project. (For Melbo...
Framer for the win - Using Framer prototypes for your app project. (For Melbo...
 
10 days of Nuracode
10 days of Nuracode10 days of Nuracode
10 days of Nuracode
 
Strange but True: Counterintiutive Paths to Building a Business on APIs
Strange but True: Counterintiutive Paths to Building a Business on APIsStrange but True: Counterintiutive Paths to Building a Business on APIs
Strange but True: Counterintiutive Paths to Building a Business on APIs
 
How agile is rails
 How agile is rails How agile is rails
How agile is rails
 
Full-Stack Developer_Tech Talk_August 13
Full-Stack Developer_Tech Talk_August 13Full-Stack Developer_Tech Talk_August 13
Full-Stack Developer_Tech Talk_August 13
 
What is a Full stack developer? - Tech talk
What is a Full stack developer? - Tech talk What is a Full stack developer? - Tech talk
What is a Full stack developer? - Tech talk
 
Collaboration Beyond Code
Collaboration Beyond CodeCollaboration Beyond Code
Collaboration Beyond Code
 
8 employer branding must-haves to engage developers
8 employer branding must-haves to engage developers8 employer branding must-haves to engage developers
8 employer branding must-haves to engage developers
 

Kürzlich hochgeladen

Advanced Computer Architecture – An Introduction
Advanced Computer Architecture – An IntroductionAdvanced Computer Architecture – An Introduction
Advanced Computer Architecture – An IntroductionDilum Bandara
 
DevEX - reference for building teams, processes, and platforms
DevEX - reference for building teams, processes, and platformsDevEX - reference for building teams, processes, and platforms
DevEX - reference for building teams, processes, and platformsSergiu Bodiu
 
unit 4 immunoblotting technique complete.pptx
unit 4 immunoblotting technique complete.pptxunit 4 immunoblotting technique complete.pptx
unit 4 immunoblotting technique complete.pptxBkGupta21
 
How AI, OpenAI, and ChatGPT impact business and software.
How AI, OpenAI, and ChatGPT impact business and software.How AI, OpenAI, and ChatGPT impact business and software.
How AI, OpenAI, and ChatGPT impact business and software.Curtis Poe
 
Take control of your SAP testing with UiPath Test Suite
Take control of your SAP testing with UiPath Test SuiteTake control of your SAP testing with UiPath Test Suite
Take control of your SAP testing with UiPath Test SuiteDianaGray10
 
Digital Identity is Under Attack: FIDO Paris Seminar.pptx
Digital Identity is Under Attack: FIDO Paris Seminar.pptxDigital Identity is Under Attack: FIDO Paris Seminar.pptx
Digital Identity is Under Attack: FIDO Paris Seminar.pptxLoriGlavin3
 
Transcript: New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024
Transcript: New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024Transcript: New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024
Transcript: New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024BookNet Canada
 
"Subclassing and Composition – A Pythonic Tour of Trade-Offs", Hynek Schlawack
"Subclassing and Composition – A Pythonic Tour of Trade-Offs", Hynek Schlawack"Subclassing and Composition – A Pythonic Tour of Trade-Offs", Hynek Schlawack
"Subclassing and Composition – A Pythonic Tour of Trade-Offs", Hynek SchlawackFwdays
 
From Family Reminiscence to Scholarly Archive .
From Family Reminiscence to Scholarly Archive .From Family Reminiscence to Scholarly Archive .
From Family Reminiscence to Scholarly Archive .Alan Dix
 
Artificial intelligence in cctv survelliance.pptx
Artificial intelligence in cctv survelliance.pptxArtificial intelligence in cctv survelliance.pptx
Artificial intelligence in cctv survelliance.pptxhariprasad279825
 
DevoxxFR 2024 Reproducible Builds with Apache Maven
DevoxxFR 2024 Reproducible Builds with Apache MavenDevoxxFR 2024 Reproducible Builds with Apache Maven
DevoxxFR 2024 Reproducible Builds with Apache MavenHervé Boutemy
 
The Role of FIDO in a Cyber Secure Netherlands: FIDO Paris Seminar.pptx
The Role of FIDO in a Cyber Secure Netherlands: FIDO Paris Seminar.pptxThe Role of FIDO in a Cyber Secure Netherlands: FIDO Paris Seminar.pptx
The Role of FIDO in a Cyber Secure Netherlands: FIDO Paris Seminar.pptxLoriGlavin3
 
The State of Passkeys with FIDO Alliance.pptx
The State of Passkeys with FIDO Alliance.pptxThe State of Passkeys with FIDO Alliance.pptx
The State of Passkeys with FIDO Alliance.pptxLoriGlavin3
 
Sample pptx for embedding into website for demo
Sample pptx for embedding into website for demoSample pptx for embedding into website for demo
Sample pptx for embedding into website for demoHarshalMandlekar2
 
DSPy a system for AI to Write Prompts and Do Fine Tuning
DSPy a system for AI to Write Prompts and Do Fine TuningDSPy a system for AI to Write Prompts and Do Fine Tuning
DSPy a system for AI to Write Prompts and Do Fine TuningLars Bell
 
Passkey Providers and Enabling Portability: FIDO Paris Seminar.pptx
Passkey Providers and Enabling Portability: FIDO Paris Seminar.pptxPasskey Providers and Enabling Portability: FIDO Paris Seminar.pptx
Passkey Providers and Enabling Portability: FIDO Paris Seminar.pptxLoriGlavin3
 
Dev Dives: Streamline document processing with UiPath Studio Web
Dev Dives: Streamline document processing with UiPath Studio WebDev Dives: Streamline document processing with UiPath Studio Web
Dev Dives: Streamline document processing with UiPath Studio WebUiPathCommunity
 
Tampa BSides - Chef's Tour of Microsoft Security Adoption Framework (SAF)
Tampa BSides - Chef's Tour of Microsoft Security Adoption Framework (SAF)Tampa BSides - Chef's Tour of Microsoft Security Adoption Framework (SAF)
Tampa BSides - Chef's Tour of Microsoft Security Adoption Framework (SAF)Mark Simos
 
Developer Data Modeling Mistakes: From Postgres to NoSQL
Developer Data Modeling Mistakes: From Postgres to NoSQLDeveloper Data Modeling Mistakes: From Postgres to NoSQL
Developer Data Modeling Mistakes: From Postgres to NoSQLScyllaDB
 
Gen AI in Business - Global Trends Report 2024.pdf
Gen AI in Business - Global Trends Report 2024.pdfGen AI in Business - Global Trends Report 2024.pdf
Gen AI in Business - Global Trends Report 2024.pdfAddepto
 

Kürzlich hochgeladen (20)

Advanced Computer Architecture – An Introduction
Advanced Computer Architecture – An IntroductionAdvanced Computer Architecture – An Introduction
Advanced Computer Architecture – An Introduction
 
DevEX - reference for building teams, processes, and platforms
DevEX - reference for building teams, processes, and platformsDevEX - reference for building teams, processes, and platforms
DevEX - reference for building teams, processes, and platforms
 
unit 4 immunoblotting technique complete.pptx
unit 4 immunoblotting technique complete.pptxunit 4 immunoblotting technique complete.pptx
unit 4 immunoblotting technique complete.pptx
 
How AI, OpenAI, and ChatGPT impact business and software.
How AI, OpenAI, and ChatGPT impact business and software.How AI, OpenAI, and ChatGPT impact business and software.
How AI, OpenAI, and ChatGPT impact business and software.
 
Take control of your SAP testing with UiPath Test Suite
Take control of your SAP testing with UiPath Test SuiteTake control of your SAP testing with UiPath Test Suite
Take control of your SAP testing with UiPath Test Suite
 
Digital Identity is Under Attack: FIDO Paris Seminar.pptx
Digital Identity is Under Attack: FIDO Paris Seminar.pptxDigital Identity is Under Attack: FIDO Paris Seminar.pptx
Digital Identity is Under Attack: FIDO Paris Seminar.pptx
 
Transcript: New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024
Transcript: New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024Transcript: New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024
Transcript: New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024
 
"Subclassing and Composition – A Pythonic Tour of Trade-Offs", Hynek Schlawack
"Subclassing and Composition – A Pythonic Tour of Trade-Offs", Hynek Schlawack"Subclassing and Composition – A Pythonic Tour of Trade-Offs", Hynek Schlawack
"Subclassing and Composition – A Pythonic Tour of Trade-Offs", Hynek Schlawack
 
From Family Reminiscence to Scholarly Archive .
From Family Reminiscence to Scholarly Archive .From Family Reminiscence to Scholarly Archive .
From Family Reminiscence to Scholarly Archive .
 
Artificial intelligence in cctv survelliance.pptx
Artificial intelligence in cctv survelliance.pptxArtificial intelligence in cctv survelliance.pptx
Artificial intelligence in cctv survelliance.pptx
 
DevoxxFR 2024 Reproducible Builds with Apache Maven
DevoxxFR 2024 Reproducible Builds with Apache MavenDevoxxFR 2024 Reproducible Builds with Apache Maven
DevoxxFR 2024 Reproducible Builds with Apache Maven
 
The Role of FIDO in a Cyber Secure Netherlands: FIDO Paris Seminar.pptx
The Role of FIDO in a Cyber Secure Netherlands: FIDO Paris Seminar.pptxThe Role of FIDO in a Cyber Secure Netherlands: FIDO Paris Seminar.pptx
The Role of FIDO in a Cyber Secure Netherlands: FIDO Paris Seminar.pptx
 
The State of Passkeys with FIDO Alliance.pptx
The State of Passkeys with FIDO Alliance.pptxThe State of Passkeys with FIDO Alliance.pptx
The State of Passkeys with FIDO Alliance.pptx
 
Sample pptx for embedding into website for demo
Sample pptx for embedding into website for demoSample pptx for embedding into website for demo
Sample pptx for embedding into website for demo
 
DSPy a system for AI to Write Prompts and Do Fine Tuning
DSPy a system for AI to Write Prompts and Do Fine TuningDSPy a system for AI to Write Prompts and Do Fine Tuning
DSPy a system for AI to Write Prompts and Do Fine Tuning
 
Passkey Providers and Enabling Portability: FIDO Paris Seminar.pptx
Passkey Providers and Enabling Portability: FIDO Paris Seminar.pptxPasskey Providers and Enabling Portability: FIDO Paris Seminar.pptx
Passkey Providers and Enabling Portability: FIDO Paris Seminar.pptx
 
Dev Dives: Streamline document processing with UiPath Studio Web
Dev Dives: Streamline document processing with UiPath Studio WebDev Dives: Streamline document processing with UiPath Studio Web
Dev Dives: Streamline document processing with UiPath Studio Web
 
Tampa BSides - Chef's Tour of Microsoft Security Adoption Framework (SAF)
Tampa BSides - Chef's Tour of Microsoft Security Adoption Framework (SAF)Tampa BSides - Chef's Tour of Microsoft Security Adoption Framework (SAF)
Tampa BSides - Chef's Tour of Microsoft Security Adoption Framework (SAF)
 
Developer Data Modeling Mistakes: From Postgres to NoSQL
Developer Data Modeling Mistakes: From Postgres to NoSQLDeveloper Data Modeling Mistakes: From Postgres to NoSQL
Developer Data Modeling Mistakes: From Postgres to NoSQL
 
Gen AI in Business - Global Trends Report 2024.pdf
Gen AI in Business - Global Trends Report 2024.pdfGen AI in Business - Global Trends Report 2024.pdf
Gen AI in Business - Global Trends Report 2024.pdf
 

Sp branding in idp discovery & login

  • 1. SP Branding in IdP Discovery & Login Rod Widdowson
  • 2. Who am I, Why am I here? Primarily a developer: Extensive Discovery experience. Deeply involved in all the examples you’ll see today.
  • 3. Take aways from this talk There is a very easy way you can massively help usability. Please do it. Their is an easy way to make significant further improvments. Please investigate at least.
  • 4. Branding, Co-branding What is Branding? What is co-branding? Why does it matter? An example.
  • 8. A Bad Login experience No continuity of story. Each page is constructed in isolation. Branding, where present, is to do with “me”. Irrelevant branding present. No forward or backward reference. Result: confusion.
  • 9. What can we do? (1) Developers & Operators (that’s me!) Unclutter the discovery GUI. Allow for forwards and backwards references. Give a continuity of experience. Branding (where appropriate). Cobranding (everywhere).
  • 10. What can we do? (2) SPs (that’s you) Make branding available: Pictures Names Words An example:
  • 11. SP
  • 13. IdP
  • 14. This looks good. Can I play? Yes and it is easy. NO software changes (for SPs) Just send a mail to service@ukfederation.org.uk asking to add your logos But you should read (http://www.ukfederation.org.uk/content/Documents/MDUIRecommendations) As well (http://tinyurl.com/6xgejes) But I’ll summarise:
  • 15. Adding a logo The logo is on your website. It has to be https:// protected. There are size constraints: Width between 64px and 350px. Height between 64px and 170px. Format constraints. PNG or GIF. Logo background (if any) should be transparent.
  • 16. Adding words & a name The Name should be meaningful and short: “Foobar Scientific Journals.” The Description should be a brief phrase “Online access to all publications of Foobar inc since 1892.”
  • 17. Is that it? In a word yes. If you want, you can Add more logos Text in different languages Other interesting stuff ... But you don’t have to.
  • 18. Embedded Discovery Why it’s easy to take control
  • 19. Why build your own discovery? Using a Centralised Discovery Service means: The wrong IdP list: Too many IdPs to select from. Not enough IdPs to select from. No control. Although the new co-branding helps. It isn’t your website. We have always recommended SPs deploy their own Discovery Service.
  • 20. Building your own discovery: old style Although was recommended it was hideously hard: Install Java Install another web server (Tomcat) Configure the GUI in this strange JSP thing. And keep it working. The example website was, at best, impenetrable.
  • 21. Why this sucked. Hard work. New and alien technology Metadata drift. The CDS was “good enough” Little return for significant effort. Diverse look and feel. And yet many brave souls got it working.
  • 22. There must be a better way Requirements: Easy to use. Easy to plagiarize examples. No new server side technology. Less than an hour to get done. We believe that we’ve met them.
  • 23. Embedded Discovery Service No new server (its all part of the SP software) So no metadata drift. No new technology, just HTML. It is a page you own And is yours to brand. Lots of other cool stuff. Another demo
  • 24. SP
  • 26. IdP
  • 27. What is involved? Add some static pages to your web servers. Add the new pages: Add some templated stuff. Make it look liker your other pages. Configure Trivial for the SP configuration. Nonexistent/trivial for the web page. You are done. It is a bug this was not easy.
  • 28. Required Software Shibboleth: Latest release OASP: Next release (but speak to the vendor) Guanxi: Current release? (but speak to the vendor) Others: Put me in touch.
  • 29. Take aways from this talk There is a very easy way you can massively help usability. Please do it. Its just one mail message after all. Their is an easy way to make significant further improvments. Please investigate. Rod Widdowson rdw@steadingsoftware.com
  • 30. Questions? Discussion? Rod Widdowsonrdw@steadingsoftware.com

Hinweis der Redaktion

  1. Primarily a developerDo not get to speak to SPs often so thanksNot a Sp type personRoles as both s Shibboleth developer and a Developer for the UK Federation.
  2. Branding: “I don’t know what it is, but I know it when I see it”Cobranding: the phrase I use to mean adding the brand of the relying party (SP if this is an IdP & vice versa) to the web page.