An open discussion list for topics related to the eduGAIN interfederation service.

[Thijs Kinkhorst <thijs.kinkhorst AT surf.nl>]

Hi Alan,

Op 15-04-2021 om 12:39 schreef Alan Lewis:
> Within the WP T&I Incubator activity we are looking at the requirements 
> for developing a Test IdP service that will be closely aligned to the 
> needs of R&E and the federations that support it.
>
> One aim would be to assist SPs in ensuring their SAML SP is correctly 
> setup to be trustworthy and requesting the ‘right’ data in the right way.
>
> To make any service as useful as possible it would be very helpful to 
> understand as many situations as possible where the SAML flow with an SP 
> fails. This could be due to metadata semantics,
>
> configuration issues at the SP, or even more basic errors.
>
> I’d be grateful to hear about the most common problems that you have 
> with SAML integration of your SPs which will help us in building up some 
> test case error scenarios.
>
> Looking forward to sharing your problems.

Sounds interesting! One thing we'd love to test whether assertions that 
are not correctly signed/signed with a different certificate are indeed 
not accepted. SP's tweak until logging in "works", but we want to ensure 
that it does _not_ work when it shouldn't.


Kind regards,
Thijs