2. UK federation today
890 members, 1330 entities and growing
The largest education and research Access
Management Federation in the world
Membership and entity registration is free to
HE & FE and to service providers
Funded by JISC
3. Who are we?
Kelley Campbell
Steve Glover
Gary Gray
Sara Hopkins
Alex Stuart
4. What do we do?
Metadata update requests
New entity registrations
Installation and configuration support
Metadata signing and publishing
Shibboleth support
Hosting of web servers with metadata
and Discovery Service
5. Common questions
How to configure the IdP to release
specific attributes.
A user reports a problem logging into a
resource. The helpdesk then follows this
up with the SP and IdP to solve the
problem.
Renewal of embedded trust-fabric
certificates in the metadata.
IdP and SP software updates.
6. Hints and tips
Read the documentation first
(shibboleth.net and ukfederation.org.uk)
Follow the recommendations
Plan your deployment
Ensure you sync the system clock
If you need clarification – ask us
Use the test SP to check your attribute
release
7. Hints and tips continued…
Ensure good communication with the
librarians
Monitor the software regularly
Keep the software up-to-date
8. A resource for you
Email us at service@ukfederation.org.uk
•Not just metadata updates
•Technical support, general queries
•Emails to that address go straight to the
helpdesk
Documentation at www.ukfederation.org.uk
•Helps you register and update your entities
•Please let us know about errors or omissions
or if there’s some content you would like to see
there
9. What we’re working on
Getting ready for Shibboleth 3 IdP and SP
Supporting RAPTOR
Technical issues specific to schools sector
Inter-federation with other education
federations
On-line tools for federation members
Increasing membership and registrations
Editor's Notes
Go through slide
We sit in EDINA which is a JISC data centre in the University of Edinburgh 10 minutes walk from here.
Anything from new endpoints, certificates, MDUI information or contact details to the metadata updates associated with a major version upgrade of SP or IdP software. We’re growing – it works out at almost 1 new entity registered every day. We know that installing and setting up Shibboleth IdP’s and SP’s is not trivial. We offer support in this and stick with it until it’s all working. We sign and publish the updated federation metadata every day There is of course other SAML-compliant software out there but our expertise is in Shibboleth. We also have access to some of the Shibboleth developers for those really tricky problems. We also host the servers hosting the metadata and the DS (WAYF)
Entitlement A common source of a helpdesk query is a user reporting that they cannot access a resource. We then use our experience and do some digging and work out where the problem lies I’m sure you’re all familiar with certificate updates for IdP’s and SP’s. We do a few of them every week. Thanks for responding to our emails and working with us to make certificate renewal as painless as possible. It is important to apply those security updates when they come out and there are still some Shibb 1.3 IdP’s out there. We’re happy to work through the update with you.