InCommon Operations Notifications

[Thomas Scavo <>]

You are receiving this message because you are an InCommon Federation Site 
Administrator or are otherwise subscribed to this mailing list. Please widely 
redistribute this message inside your organization as needed. 

On February 15, InCommon Operations begins full integration with the global 
eduGAIN [1] service. To protect against failed metadata processes [2] and to 
ensure the continued operation of all federation services, your ACTION MAY BE 
REQUIRED now. For detailed instructions, consult the comprehensive Getting 
Ready for eduGAIN [3] wiki page.

The following operations will commence on February 15:

1. InCommon Ops will begin importing eduGAIN metadata into the main 
production aggregate, which will cause the overall size of InCommon metadata 
to grow from 17MB to over 32MB

2. InCommon Ops will begin exporting metadata to eduGAIN at scale
  2a. Your InCommon IdP metadata will be exported by default
  2b. Your InCommon SP metadata will be exported on demand

Be aware that the following deployments are AT RISK:

- All simpleSAMLphp deployments (both SP and IdP). The metarefresh module 
that ships with the simpleSAMLphp software is known to be sensitive to large 
metadata files. Deployers are advised to upgrade to simpleSAMLphp v1.13.2 (or 
later) ASAP.

- All Shibboleth IdP deployments. All versions of the Shibboleth IdP software 
are known to be sensitive to large metadata files. Deployers are advised to 
allocate at least 1024MB of heap in the JVM.

If you have questions or concerns, please write to 


Tom Scavo
for InCommon Operations

[1] eduGAIN https://spaces.internet2.edu/x/X4BdBQ
[2] Protect Against Failed Metadata Processes 
https://spaces.internet2.edu/x/zgFwBQ
[3] Getting Ready for eduGAIN https://spaces.internet2.edu/x/VASDBQ