Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision		 Previous revision
Next revisionBoth sides next revision
en:checklist [2022/04/05 14:11] – Most parts are translated Silke Meyeren:checklist [2022/05/23 16:59] – [Federations] added screenshot for new metadata admin tool Silke Meyer
Line 13: Line 13:
 Before submitting a new IdP/SP to the federation, please make sure you have filled in the form as described below - that is: before you activate a federation with this radio button: Before submitting a new IdP/SP to the federation, please make sure you have filled in the form as described below - that is: before you activate a federation with this radio button:
  
 +**current/old metadata admin tool:**\\
 {{:en:metadata_admin_tool:no-federation.png?600|}} {{:en:metadata_admin_tool:no-federation.png?600|}}
 +
 +**upcoming/new metadata admin tool:**\\
 +{{:en:metadata_admin_tool:no-federation-newmdv.png?800|}}
  
   * The metadata administration tool can fetch your IdP's/SP's metadata from the system. If you get a warning saying **unable to open file**, your webserver does not return the full certificate chain. On the [[en:certificates#the_ssl_certificate_chain_on_your_webserver|certificates page]] you can read how to correct this.   * The metadata administration tool can fetch your IdP's/SP's metadata from the system. If you get a warning saying **unable to open file**, your webserver does not return the full certificate chain. On the [[en:certificates#the_ssl_certificate_chain_on_your_webserver|certificates page]] you can read how to correct this.
Line 151: Line 155:
 ===== Federations ===== ===== Federations =====
  
 +Here you add your IdP/SP to federations.
 +If you submit your provider to DFN-AAI-Test or to local metadata, it is automatically added to the according metadata. Submissions for DFN-AAI and DFN-AAI-Basic are first checked by the DFN-AAI team. Admission is granted within a working day, unless the metadata form displays errors. Please fix these errors first! You can only add your IdP/SP to the international federation eduGAIN after it has been accepted to either DFN-AAI or DFN-AAI-Basic. You can find our policies in the [[en:join|documentation]]
  
 +Information regarding the Degrees of Reliance:
 +
 +IdP:
 +  * Depending on the criteria your IdP fulfills add it to either DFN-AAI or DFN-AAI-Basic.
 +  * In addition, an IdP can be registered in DFN-AAI-Test and in local metadata. Keeping a productive IdP in the test federation is not recommended.
 +  * 
 +SP:
 +  * Choose the degree of reliance that an IdP (!) must fulfill to grant access to their users. In DFN-AAI only users of the 'Advanced' degree of reliance can access the SP. In DFN-AAI-Basic the users of all IdPs in the federation can access it.
 +  * Additionally, the SP can be registered in DFN-AAI-Test. A productive SP should not be in the test federation to prevent logins from test IdPs.
 +  * Local metadata can only be selected if neither DFN-AAI nor DFN-AAI-Basic is selected. The option is available for organizations that have signed an IdP contract with us and have registered at least an IdP.
   * Put your new system into our **test federation** DFN-AAI-Test. Use our [[en:functionaltest|public test systems]] to check if the transfer of attributes works correctly.   * Put your new system into our **test federation** DFN-AAI-Test. Use our [[en:functionaltest|public test systems]] to check if the transfer of attributes works correctly.
 +
 +**current/old metadata admin tool:**\\
 {{:en:metadata_admin_tool:test-en.png?600|}} {{:en:metadata_admin_tool:test-en.png?600|}}
 +
 +**upcoming/new metadata admin tool:**\\
 +{{:en:metadata_admin_tool:test-en-newmdv.png?800|}}
 +
   * If it does, submit a request to join DFN-AAI. A ticket is then opened on our side and you will hear from us.   * If it does, submit a request to join DFN-AAI. A ticket is then opened on our side and you will hear from us.
  
  • Last modified: 16 months ago