InCommon metadata support

[Tom Scavo <>]

[Mike, can you please subscribe to this mailing list?]

On Thu, Feb 25, 2016 at 12:26 PM, Mike Flynn 
<>
 wrote:
> Well... as an SP, I load UK Federation and incommon which include edugain.
> InCommon is my home since I am US based.  It's just taking a really long
> time to load this stuff now. if there is redundancy I want to eliminate it
> if possible.

We're talking about two different things here. Ian and I were
discussing the metadata you publish to the world. Currently you have
at least two metadata sources to maintain. Ideally you should have ONE
global metadata source.

OTOH, you're asking how to configure your SP for metadata refresh (I
think). If you are currently loading both the UKf metadata file and
the InCommon metadata file, yes, your system is doing a bunch of
unnecessary work. You should load just one of those files. Which one
depends on your "home" federation.

Hope this helps,

Tom

> On Thu, Feb 25, 2016 at 9:18 AM, Ian Young 
> <>
>  wrote:
>>
>>
>> On 25 Feb 2016, at 16:48, Mike Flynn 
>> <>
>>  wrote:
>>
>> Since the UK federation now includes InCommon, can I drop the separate
>> loading of InCommon?
>>
>>
>> You almost certainly don't need to load both, but you can probably pick
>> either to load as both federations have an opt-out policy for IdPs.
>>
>> There will be some IdPs that appear in one federation aggregate but not
>> the other, and you should check those against your customer list before
>> deciding. For example, there are still a number of SAML 1 only IdPs in the
>> UKf which don't appear in InCommon at this point, but the great majority of
>> those are part of a service run by Eduserv which are being converting to
>> SAML 2 at a pretty rapid rate. So within the next couple of months, the UKf
>> and InCommon aggregates will have very similar IdP collections.
>>
>> In the long run, obviously what we all want is that you'd pick the
>> federation which is most obviously your "home" federation, register with
>> that and get global reach by just consuming metadata from that single
>> source. We're probably closer to that point than you might think.
>>
>>     -- Ian
>>
>
>
>
> --
> Mike Flynn
>
> linkedIn / lynda.com
>
> Internal Extension: 359
> O. 805-755-1515
> C. 805-990-4566