InCommon Technical Discussions

[Rhys Smith <>]

A lot of UKf SPs use ePTID as it’s one of our core recommended attributes - 
so a lot of commercial publishers that offer personalisation will use it.

Don’t think we’ve had any reported issues from any of our IdPs that’ve 
upgraded about changed ePTID values.

If anyone wants to check, they can login via the UK federation Test SP at 
https://test.ukfederation.org.uk/ (assuming that gets imported into InC from 
eduGAIN, and the InC IdP is exported to eduGAIN (and therefore imported to 
UKf). That SP displays all of the attributes & values it receives - so the 
admin can record the ePTID/persistent nameid it gets pre-upgrade, and check 
it’s the same post upgrade.

Rhys.
--
Dr Rhys Smith
Chief Technical Architect, Trust & Identity
Jisc

T: +44 (0) 1235 822145
M: +44 (0) 7968 087821
Skype: rhys-smith
GPG: 0x4638C985
Lumen House, Library Avenue, Harwell Oxford, Didcot, OX11 0SG

jisc.ac.uk

Jisc is a registered charity (number 1149740) and a company limited by 
guarantee which is registered in England under Company No. 5747339, VAT No. 
GB 197 0632 86. Jisc’s registered office is: One Castlepark, Tower Hill, 
Bristol, BS2 0JA. T 0203 697 5800.

> On 7 Jun 2017, at 22:46, Basney, Jim 
> <>
>  wrote:
> 
> Hi,
> 
> Are any other InCommon SPs besides CILogon being routinely impacted by 
> ePTID changes when InCommon IdPs upgrade to Shibboleth IdPv3? For CILogon 
> the ePTID changes trigger an ePPN reassignment workflow (i.e., "it appears 
> your ePPN has been reassigned") that results in users of the upgraded IdP 
> losing access to their existing CILogon accounts. These IdPv3-upgrade ePTID 
> changes have been causing CILogon user support requests from December 2015 
> up to today.
> 
> Is CILogon an outlier for checking ePTID values? IdP operators tell us 
> we're wrong for thinking the ePTID changes are a problem. Since 100+ 
> InCommon IdPs still need to upgrade from Shibboleth IdP V2 to V3 [1], I 
> think this problem isn't going away any time soon.
> 
> I appreciate your advice and perspectives.
> 
> Thanks,
> Jim
> 
> [1] 
> https://spaces.internet2.edu/display/InCFederation/List+of+Shibboleth+IdPs+by+Version
> 
> To unsubscribe from this list, send email to 
> 
>  with the subject: unsubscribe technical-discuss