An open discussion list for topics related to the eduGAIN interfederation service.

[Lukas Hämmerle <lukas.haemmerle AT switch.ch>]

Hi Jozef

On 03.03.17 11:42, Jozef Misutka wrote:
> we just resolved an issue with metadata and key rollover process in
> several federations.
> 
> The eduGAIN connectivity check would have identified the problem
> automatically. Therefore,
> I wanted to ask if you plan to make the service available for particular
> SPs meaning
> I would enter a) url with entityID parameter and b) url listing
> supported IdPs (e.g., local discojuice feeds). The service would forge
> the SP urls used to
> perform the login and check for errors at the login page

The eduGAIN Connectivity Check Service (ECCS) [1] currently tests all
eduGAIN IdPs by sending authentication requests in the name of two
predefined SPs (so there are n x 2 checks performed where n is number of
IdPs). There are no plans to change the bevaviour to perform n x m
checks (where m would be number of SPs).

Funny enough, just this week there has been a similar question from
Leif. So, if there is a real need for n x m checking, we could consider
this and adapt ECCS. As you say, this would however mean that each IdP
currently would be hammered more than a thousand requests per day
because m=1466 as of today :-) I know at lesat from our Danish
colleagues that this might ruin their statistics if not handles properly.

Another option could be that the ECCS REST/JSON API is extended to check
a particular IdP-SP combination and return the check results.


@Marco (ECCS lead developer): Feel free to add/comment on what you think
of this.

Best Regards
Lukas

[1] https://technical.edugain.org/eccs/
    https://wiki.edugain.org/EduGAIN_Connectivity_Check

-- 
SWITCH
Lukas Hämmerle, Central Solutions
GÉANT Project Task Leader of
eduGAIN Service Development - Research and Service Providers
Werdstrasse 2, P.O. Box, 8021 Zurich, Switzerland
phone +41 44 268 15 05, direct +41 44 268 15 64
lukas.haemmerle AT switch.ch, http://www.switch.ch

30 years of pioneering the Swiss Internet. Celebrate with us at
https://swit.ch/30years