InCommon Operations Notifications

[Thomas Scavo <>]

You are receiving this message because you are an InCommon Site Administrator 
or are otherwise subscribed to this mailing list. Your prompt action is 
requested.

tl;dr Please check the current list of errorURLs in IdP metadata. [1] If your 
IdP does not have an errorURL in metadata, we encourage you to add one. If 
your errorURL in metadata is broken or otherwise nonfunctional, please fix it 
asap.

The InCommon Federated Error Handling Service [2] relies heavily on the Error 
Handling URL [3] (i.e., errorURL) in IdP metadata. If a user arrives at an SP 
with insufficient attributes, and the SP is configured to use the Error 
Handling Service, the SP can display a page that invites the user to click on 
the IdP’s published errorURL for assistance.

Alternatively, if you prefer that your IdP not be shown on discovery 
interfaces by default, you may self-assert membership in the Hide From 
Discovery Category. [4] To do this, simply log into the Federation Manager 
and check the appropriate checkbox.

As a service to the community, InCommon Operations regularly probes errorURLs 
in IdP metadata. The results of the latest probe are recorded in the wiki. 
[1] Your IdP is good to go if all of the following are true: 1) your IdP 
metadata currently includes an errorURL, 2) the curl error code is 0, and 3) 
the HTTP response code is 200. If your IdP metadata does not include an 
errorURL, or the one you have listed in metadata is not working properly, 
please update your metadata today!

In any case, please double-check the content of your error page. It should 
give the user clear instructions what to do in the case of insufficient 
attributes.

If you have questions, please contact us at 


[1] List of errorURLs in IdP Metadata https://spaces.internet2.edu/x/GIAqBg
[2] Error Handling Service https://spaces.internet2.edu/x/kJOVAQ 
[3] Error Handling URL https://spaces.internet2.edu/x/j4uVAQ 
[4] Hide From Discovery Category https://spaces.internet2.edu/x/6YD4Ag 

-----
Tom Scavo
For InCommon Operations