InCommon Operations Notifications

[Thomas Scavo <>]

InCommon Operations begins full integration with the global eduGAIN service 
one week from today, on Monday, February 15. At that time, we will send one 
more message to let you know that the integration is complete and we are 
actually importing/exporting eduGAIN metadata at scale.

A few additional notes as we head into the home stretch:

- If you haven’t already done so, please review the comprehensive Getting 
Ready for eduGAIN [1] wiki page.

- So far 19 IdPs have been tagged with the hide-from-discovery entity 
attribute. To find out if your IdP is discoverable, consult the Hide From 
Discovery topic in the wiki. [2]

- To date, only 21 InCommon IdPs have migrated to the global Research & 
Scholarship Category. For seamless integration with more than 90 global R&S 
SPs, InCommon IdPs are strongly encouraged to migrate to the global R&S 
category [3] as soon as possible.

As of today, two dozen IdP operators have opted out of eduGAIN. If you are 
one of them, we ask you to reconsider: All IdP operators are strongly 
encouraged to export their metadata to eduGAIN. Remember, you control whether 
or not you federate with a partner by configuring your IdP with an 
appropriate attribute release policy.

Similarly, 64 SP owners have opted into eduGAIN. If your SP is intended for a 
global audience, by all means opt into eduGAIN participation now.

Questions? Please contact us at 


Tom Scavo
for InCommon Operations

[1] https://spaces.internet2.edu/x/VASDBQ
[2] https://spaces.internet2.edu/x/6YD4Ag
[3] https://spaces.internet2.edu/x/9QE7BQ 

________________________________________
From: Thomas Scavo
Sent: Tuesday, February 2, 2016 4:45 PM
To: 

Cc: InCommon Administration
Subject: Getting Ready for eduGAIN [ACTION REQUIRED]

You are receiving this message because you are an InCommon Federation Site 
Administrator or are otherwise subscribed to this mailing list. Please widely 
redistribute this message inside your organization as needed.

On February 15, InCommon Operations begins full integration with the global 
eduGAIN [1] service. To protect against failed metadata processes [2] and to 
ensure the continued operation of all federation services, your ACTION MAY BE 
REQUIRED now. For detailed instructions, consult the comprehensive Getting 
Ready for eduGAIN [3] wiki page.

The following operations will commence on February 15:

1. InCommon Ops will begin importing eduGAIN metadata into the main 
production aggregate, which will cause the overall size of InCommon metadata 
to grow from 17MB to over 32MB

2. InCommon Ops will begin exporting metadata to eduGAIN at scale
  2a. Your InCommon IdP metadata will be exported by default
  2b. Your InCommon SP metadata will be exported on demand

Be aware that the following deployments are AT RISK:

- All simpleSAMLphp deployments (both SP and IdP). The metarefresh module 
that ships with the simpleSAMLphp software is known to be sensitive to large 
metadata files. Deployers are advised to upgrade to simpleSAMLphp v1.13.2 (or 
later) ASAP.

- All Shibboleth IdP deployments. All versions of the Shibboleth IdP software 
are known to be sensitive to large metadata files. Deployers are advised to 
allocate at least 1024MB of heap in the JVM.

If you have questions or concerns, please write to 


Tom Scavo
for InCommon Operations

[1] eduGAIN https://spaces.internet2.edu/x/X4BdBQ
[2] Protect Against Failed Metadata Processes 
https://spaces.internet2.edu/x/zgFwBQ
[3] Getting Ready for eduGAIN https://spaces.internet2.edu/x/VASDBQ