Skip to Content.
Sympa Menu

technical-discuss - [InC-Technical] ePTID changes caused by Shibboleth IdPv3 upgrade

Subject: InCommon Technical Discussions

List archive

[InC-Technical] ePTID changes caused by Shibboleth IdPv3 upgrade


Chronological Thread 
  • From: "Basney, Jim" <>
  • To: "" <>
  • Subject: [InC-Technical] ePTID changes caused by Shibboleth IdPv3 upgrade
  • Date: Wed, 7 Jun 2017 21:46:55 +0000
  • Accept-language: en-US
  • Ironport-phdr: 9a23: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
Hi,

Are any other InCommon SPs besides CILogon being routinely impacted by ePTID
changes when InCommon IdPs upgrade to Shibboleth IdPv3? For CILogon the ePTID
changes trigger an ePPN reassignment workflow (i.e., "it appears your ePPN
has been reassigned") that results in users of the upgraded IdP losing access
to their existing CILogon accounts. These IdPv3-upgrade ePTID changes have
been causing CILogon user support requests from December 2015 up to today.

Is CILogon an outlier for checking ePTID values? IdP operators tell us we're
wrong for thinking the ePTID changes are a problem. Since 100+ InCommon IdPs
still need to upgrade from Shibboleth IdP V2 to V3 [1], I think this problem
isn't going away any time soon.

I appreciate your advice and perspectives.

Thanks,
Jim

[1]
https://spaces.internet2.edu/display/InCFederation/List+of+Shibboleth+IdPs+by+Version


Archive powered by MHonArc 2.6.19.

Top of Page