An open discussion list for topics related to the eduGAIN interfederation service.

[Ian Young <ian AT iay.org.uk>]

On 7 Jul 2014, at 16:42, Lalla Maria Laura Mantovani 
<marialaura.mantovani AT garr.it> wrote:

> I'm thinking that a possibility to balance the metadata exchange is to 
> import in the edugain2idem metadata stream also all the SPs present in the 
> UKfederation. Unless you want to register all your SPs in eduGAIN.

We do want to shift from opt-in to opt-out for both our IdPs and SPs. One 
reason we have held back from that so far is the number of entities involved 
(726 IdPs and 965 SPs). I don't think we know what would happen if the 
eduGAIN aggregate suddenly jumped in size by that much and we don't want to 
break anything. Initiatives like your own federation moving from opt-in to 
opt-out for IdPs will help build confidence in metadata exchange on a larger 
scale, I think.

We have recently been discussing how to move forward with this. It might be 
useful for us to consider whether we could pilot some of these changes with 
your help by providing you with a more substantial export aggregate than the 
one we currently provide to eduGAIN.

We had been considering excluding SAML 1-only entities from any such 
experiments. I note, however, that the SP you've had the problem with doesn't 
support SAML 2.0, so we may need to take another look at that.

Let me know if this sounds interesting; we will have another discussion here 
and get back to you off-list.

        -- Ian

Attachment: smime.p7s
Description: S/MIME cryptographic signature