[Tf-aai] check CPH SAML metadata

Jozef Misutka misutka at ufal.mff.cuni.cz
Mon Apr 3 08:33:42 CEST 2017


On 3 April 2017 at 04:19, Mitchell Seaton <seaton at hum.ku.dk> wrote:

> Dear AAI-TF,
>
> On 04/01/2017 02:04 AM, Jozef Misutka wrote:
>
>
>
> On 31 March 2017 at 16:49, Daan Broeder <daan.broeder at meertens.knaw.nl>
> wrote:
>
>> Dear AAI-TF
>> Could you please check if the CPH centre SAML metadata has a valid link
>> to a privacy policy statement.
>>
> Yes, the privacy link is valid.
>
>
> Yes.
>
>
> But it does not have a CoCo conforming saml:AttributeValue, see
> http://monitor.edugain.org/coc/?show=list_sps
> entityId -> https://infra.clarin.dk/shibboleth
> <http://monitor.edugain.org/coc/?f_id_sp=1301&f_entityID=clarin.dk&page=1&f_order=ts+desc&show=list_sp_tests&f_is_changed=1>
>
>
> This is incorrect the necessary entity SAML attributes are there in the
> metadata - see https://infra.clarin.eu/aai/prod_md_about_spf_sps.xml
>
> <saml:Attribute Name="http://macedir.org/entity-category" NameFormat="
> urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
> <saml:AttributeValue>
> http://www.geant.net/uri/dataprotection-code-of-conduct/v1
> </saml:AttributeValue>
> </saml:Attribute>
>
>
> To see real xml metadata from various federations, see
> https://met.refeds.org/met/entity/https%253A%252F%252Finfra.clarin.dk%
> 252Fshibboleth/
>
> To me the problem seems to be AAI-DFN as the register - is using different
> SP metadata.
> Does someone know what is going on here with AAI-DFN?
>

CCing SPF, can you find out why the following differ for infra.clarin.dk?

Metadata from DFN
https://met.refeds.org/met/entity/https%3A//infra.clarin.dk/shibboleth/?viewxml=true&federation=dfn-aai
and infra.clarin.dk metadata from SPF
https://infra.clarin.eu/aai/prod_md_about_spf_sps.xml

Thank you,
Jozef




>
> SP metadata is updated and valid within CLARIN SPF - pushed to eduGAIN and
> WAYF is currently pulling from eduGAIN as of this year.
>
> Best,
> Jozef
>
>
>> Please send me a copy of the metadata.
>>
>> Thanks,
>> Daan
>>
>> Daan Broeder
>> Tel. +31 20 4628625 <+31%2020%20462%208625>
>> Daan.broeder at meertens.knaw.nl
>> Meertens Instituut (Afdeling Technische Ontwikkeling)
>> Oudezijds Achterburgwal 185
>> 1012 DK Amsterdam
>>
>> Postbus 10855
>> 1001 EW Amsterdam
>> ----
>>
>>
>>
>> _______________________________________________
>> Tf-aai mailing list
>> Tf-aai at lists.clarin.eu
>> https://lists.clarin.eu/cgi-bin/mailman/listinfo/tf-aai
>>
>>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.clarin.eu/cgi-bin/mailman/private/tf-aai/attachments/20170403/c489682c/attachment.htm>


More information about the Tf-aai mailing list