An open discussion list for topics related to the eduGAIN interfederation service.

[Jan Tomasek <Jan.Tomasek AT cesnet.cz>]

On 02/05/2014 06:29 PM, Peter Schober wrote:
> * Jan Tomášek <jan.tomasek AT cesnet.cz> [2014-02-05 18:01]:
>> After this long discussion I still do not see reason why to offer to
>> user login with CESNET IdP at Scram if we know in advance that this
>> can not work. This kill usability to USER which is our target
>> audience.
> 
> A question well suited for that SP, wouldn't you think? (Even though
> by now you should be able to answer how it got there.)

I do not agree. It is IdP who produces error and that error will be seen
by a valid user of that IdP. => user will complain at desk of
administrator of that IdP. Who has noting to do with root of problem.
And this does not seem right to me.

> This is not about metadata (I hope we all agree that "it should flow"
> freely) but about the SP not doing its job particularly well helping
> users to find their institution.
> 
> And confusion on part of the CESNET DS -- clearly when you're sucking
> up the UKf's own downstream this is not even an eduGAIN issue!

No. Our DS operations was only the way how I learned about this. Even if
I switch off our DS, the problem wont get away.

And Yes it is eduGAIN issue, it wont be only if UKf/SWAMID import
eduID.cz directly. But they are importing it from eduGAIN. eduGAIN
metadata are used in way I was not aware when I exported some of our
entities there.

Now I know enough to be able to answer questions of our members and
users if they discover this. I still do not see big value in half-way
eduGAIN opt-in but maybe I will start to understand after we grow to UK
size.

Thanks for input from all participants
-- 
--------------------------------------------------------------
Jan Tomasek aka Semik           work: CESNET, z.s.p.o.
http://staff.cesnet.cz/~semik/        Zikova 4, 160 00 Praha 6
                                      Czech Republic
phone: +420 234 680 279               http://www.cesnet.cz/

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature