Skip to Content.
Sympa Menu

edugain-discuss - [eduGAIN-discuss] WAYF introduces proxy IdPs in interfederation metadata

edugain-discuss AT lists.geant.org

Subject: An open discussion list for topics related to the eduGAIN interfederation service.

List archive

[eduGAIN-discuss] WAYF introduces proxy IdPs in interfederation metadata


Chronological Thread 
  • From: WAYF-sekretariatet <sekretariat AT wayf.dk>
  • To: fog AT refeds.org, operations AT kalmar2.org, edugain-discuss AT geant.net
  • Subject: [eduGAIN-discuss] WAYF introduces proxy IdPs in interfederation metadata
  • Date: Wed, 10 Jun 2015 13:30:37 +0200
  • List-archive: <http://mail.geant.net/pipermail/edugain-discuss/>
  • List-id: "An open discussion list for topics related to the eduGAIN interfederation service." <edugain-discuss.geant.net>

Dear all,


WAYF now introduces distinct entities for its connected IdPs in the Kalmar2 and eduGAIN metadata feeds, enabling SPs to connect to Danish IdPs directly, in a peer2peer manner, e.g. enabling an SP like the GEANT Intranet to connect directly to the Technical University of Denmark, through eduGAIN.

Being a hub&spoke federation, Danish WAYF has until now published just a single IdP in Kalmar2 and eduGAIN metadata, namely the WAYF hub IdP. The real IdPs behind the WAYF hub thus have so far not been accessible as seperate entities, making it technically impossible for a number of non-Danish SPs to connect directly to their Danish customer institutions through eduGAIN and Kalmar2.

This situation is now changing:

With these proxy IdP entities published in the Kalmar2 and eduGAIN metadata feeds, WAYF can now, in the context of interfederation, be thought of as any other peer2peer federation, breaking down both technical and mental barriers.

Over the coming week WAYF will gradually publish its almost 100 IdPs to Kalmar2 and eduGAIN — this, to avoid potential problems with large, sudden increases in the number of IdPs and to be able to contain any problems that may arise during the operation.

As we publish an entity-specific certificate — based on the same common key — for each entity, (older versions of) ADFS based SPs are supported.


Best regards,

The WAYF Secretariat



Archive powered by MHonArc 2.6.19.

Top of Page