An open discussion list for topics related to the eduGAIN interfederation service.

[Stefan Winter <stefan.winter AT restena.lu>]

Hello,

> Removed this requirement related to uniqueness of IdP per institution.
> There can be large entities that have several components, each one with
> own authentication systems (thinking about the Romanian Academy which
> has many institutes, but maybe community has other examples ?).

Your website still states that only one IdP per participant is allowed:

https://eduid.roedu.net/membership/

"In order to maintain consistency, only one IdP per institution is
accepted."

On the substance of the question, it's probably a wise idea to change
the website to be in line with a policy that *allows* multiple IdPs per
participant.

One trivial example (which I see occuring in real life) is that an
organisation wants to upgrade/switch their IdP software without
endangering production use. They would typically add a "testing" IdP
alongside the production one for a while.

Greetings,

Stefan Winter

-- 
Stefan WINTER
Ingenieur de Recherche
Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et
de la Recherche
2, avenue de l'Université
L-4365 Esch-sur-Alzette

Tel: +352 424409 1
Fax: +352 422473

PGP key updated to 4096 Bit RSA - I will encrypt all mails if the
recipient's key is known to me

http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66

Attachment: 0xC0DE6A358A39DC66.asc
Description: application/pgp-keys

Attachment: signature.asc
Description: OpenPGP digital signature