InCommon metadata support

[Feyaerts Vincent <>]

Hi James

 

Thanks for looking into this. Yes, you are correct, that’s the cause. We asserted SIRTFI for a short time but for some reason our security contact was missing in our metadata. However, since today we have rectified this, and our new metadata was published since this morning trough the Belnet Federation.

 

It might be that we just have to wait longer so that our new metadata is known everywhere and the filter no longer triggers. However, just to be sure, is there a manual action needed to remove the filtering-out once the metadata of our IdP is ok?

 

Thank you

 

Kind regards

Vincent Feyaerts

 

From: James Babb <>
Sent: dinsdag 5 februari 2019 15:44
To: Feyaerts Vincent <>;
Cc: Backeljauw Franky <>;
Subject: Re: [Metadata-Support] Our IDP is now missing from the IdP selection

 

Thanks for reaching out--

 

I took a look in to what is happening and that IdP is filtered out of the import from eduGAIN because it is missing a REFEDS security contact but asserts SIRTFI.  It looks like the IdP just started showing up on the filter report with yesterday’s publishing, which aligns with the timing that it disappeared yesterday.  Was the metadata for that IdP changed recently to remove a security contact or add the SIRTFI assurance assertion?

 

Please let me know if you need any other assistance or have any other questions.

 

Best regards,

--

James Babb

Trust & Identity Services Support Engineer

InCommon / Internet2

 

 

From: <> on behalf of Terry Fleury <>
Reply-To: "" <>
Date: Tuesday, February 5, 2019 at 6:48 AM
To: Feyaerts Vincent <>, "" <>
Cc: Backeljauw Franky <>, "" <>
Subject: Re: [Metadata-Support] Our IDP is now missing from the IdP selection

 

Hello Vincent,

I am cc'ing who may be able to help.

The entityID https://idpx.ua.ac.be/idp/shibboleth was removed from InCommon Metadata (http://md.incommon.org/InCommon/InCommon-metadata.xml) on 2019-02-04 19:40Z. CILogon relies on the InCommon Metatdata for the list of Identity Providers. I'm not sure why the entityID was removed from InCommon's metadata.

According to the REFEDS Metadata Explorer Tool (https://met.refeds.org/met/entity/https%253A%252F%252Fidpx.ua.ac.be%252Fidp%252Fshibboleth/), the entityID appears on eduGAIN metadata, so it should be in InCommon metadata as well. Hopefully the InCommon metadata support team can shed some light on the issue.

--
Terry Fleury
CILogon Administrator

On 2019-02-05 2:34 AM, Feyaerts Vincent wrote:

Hi,

 

I’m the Shibboleth IdP admin @ Universiteit Antwerpen. Our IDP’s entityid is https://idpx.ua.ac.be/idp/shibboleth

 

We just implemented changes so that our users can log in @ cilogon.org but for reasons unknown, our IdP is now missing from the selection. It was definately there before.

 

Can you look into this, and see why our IdP is no longer available for selection?

Thank you

Vincent Feyaerts

Network Administrator

Universtity of Antwerp

--
You received this message because you are subscribed to the Google Groups "help" group.
To unsubscribe from this group and stop receiving emails from it, send an email to .