An open discussion list for topics related to the eduGAIN interfederation service.

[Lalla Maria Laura Mantovani <marialaura.mantovani AT garr.it>]

Dear Rhys, Ian and all,
I see a problem with the metadata flow for IDEM federation happened after
that UK joined eduGAIN. I'm writing also to the lists because I think
that this report can be useful also to other federation
operators.

Several end users coming from different Italian IdPs that opt-in to
eduGAIN found their IdP in the discovery service list of several new SPs
and they wanted to login. 
One of this, for example, is

http://scitation.aip.org/ 

Unfortunately they got an error due to the metadata exchange between IdP
and SP. Indeed these SPs are not included in the eduGAIN metadata
aggregate. 
Why then these SPs knew the metadata of these Italian IdPs? The reason is
that the metadata of Italian IdPs that opt-in to eduGAIN were included in
the UKFederatation Metadata. 
I don't understand if this happened because of a mistake in your
procedure, or this is a desired flow. 
I have to say that I don't like that Italian end users got an error
message that they don't understand and we as italian federator operator
can't do anything to help them.

Italian entities that opt-in eduGAIN consume eduGAIN metadata. They
didn't opt-in to UKFederation, so they don't consume UKF metadata. For
this, UK entities that didn't opt-in eduGAIN must not consume eduGAIN
metadata because acting in this way they only cause errors.

So please take away italian entities from the ukfederation
metadata.

Best regards
lalla

Maria Laura Mantovani
Consortium GARR - Servizio IDEM GARR AAI
Via dei Tizii, 6 - I-00185 Roma
CF 97284570583 – PI 07577141000
Tel +39 059 205 [ 8137 | 8019 ] - Fax +39 059 205 8036
Mobile: +39 3666112589
skype: laura.manto
http://idem.garr.it - http://www.garr.it