Dokumentation DFN-AAI, DFN-PKI und eduroam - en:aai

about

Anonymous (anonymous@undisclosed.example.com) — 2026-06-01T13:30:29+00:00

2024/01/15 15:46		aktuell
Zeile 1:		Zeile 1:
-	FIXME This page is not fully translated, yet. Please help completing the translation.\\ //(remove this paragraph once the translation is finished)//

	~~NOTOC~~		~~NOTOC~~

assurance

Anonymous (anonymous@undisclosed.example.com) — 2024-07-08T08:11:18+00:00

2023/01/12 19:21		aktuell
Zeile 7:		Zeile 7:
	The [[https://refeds.org/assurance\|REFEDS Assurance Framework]] defines how identity assurance information can be transported via values of the [[de:common_attributes#a14\|eduPersonAssurance]] attribute. It enables service providers to address particularly relevant reliability criteria separately (if necessary), depending on individual protection requirements. As a internationally recognized standard, the [[https://refeds.org/assurance\|REFEDS Assurance Framework]] is a key factor for the connectivity of the DFN-AAI in the international context. This particularly concerns the support of research communities that depend on cross-federation collaboration via [[https://wiki.geant.org/display/eduGAIN/\|eduGAIN]].		The [[https://refeds.org/assurance\|REFEDS Assurance Framework]] defines how identity assurance information can be transported via values of the [[de:common_attributes#a14\|eduPersonAssurance]] attribute. It enables service providers to address particularly relevant reliability criteria separately (if necessary), depending on individual protection requirements. As a internationally recognized standard, the [[https://refeds.org/assurance\|REFEDS Assurance Framework]] is a key factor for the connectivity of the DFN-AAI in the international context. This particularly concerns the support of research communities that depend on cross-federation collaboration via [[https://wiki.geant.org/display/eduGAIN/\|eduGAIN]].

-	A more detailed presentation (in German) of the facts can be found in [[https://www2.dfn.de/fileadmin/5Presse/DFNMitteilungen/DFN_Mitteilungen_100.pdf\|DFN-Mitteilungen Nr. 100]] starting on page 42.	+	A more detailed presentation (in German) of the facts can be found in [[https://download.aai.dfn.de/publikationen/dfn-mitteilungen/DFN-Mitteilungen-100.pdf\|DFN-Mitteilungen Nr. 100]] starting on page 42.

	===== Information for Identity Providers =====		===== Information for Identity Providers =====

assurance_sp

Anonymous (anonymous@undisclosed.example.com) — 2024-01-21T12:46:27+00:00

2024/01/21 13:42		aktuell
Zeile 23:		Zeile 23:
	ShibRequestSetting requireSession true		ShibRequestSetting requireSession true
	<RequireAll>		<RequireAll>
		+	Require shib-attr assurance https://refeds.org/assurance/IAP/medium
		+	Require shib-attr assurance https://refeds.org/assurance/ATP/ePA-1m
		+	</RequireAll>
		+	</Location>
		+	</file>
		+
		+	As above - and the Service Provider only accepts the REFEDS Assurance Framework version 2.0.
		+
		+	<file apache /etc/apache2/sites-enabled/sp.uni-beispiel.de.conf>
		+	<Location /protected>
		+	AuthType shibboleth
		+	ShibRequestSetting requireSession true
		+	<RequireAll>
		+	Require shib-attr assurance https://refeds.org/assurance/version/2
	Require shib-attr assurance https://refeds.org/assurance/IAP/medium		Require shib-attr assurance https://refeds.org/assurance/IAP/medium
	Require shib-attr assurance https://refeds.org/assurance/ATP/ePA-1m		Require shib-attr assurance https://refeds.org/assurance/ATP/ePA-1m

attributes_best_practice

Anonymous (anonymous@undisclosed.example.com) — 2021-12-14T17:11:41+00:00

2021/12/14 18:10		aktuell
Zeile 23:		Zeile 23:
	\| ''schacHomeOrganization'' and ''o'' Documentation about [[de:common_attributes#a06\|o]] (de) und [[de:common_attributes#a18\|schacHomeOrganization]] (de)\| recommended \|		\| ''schacHomeOrganization'' and ''o'' Documentation about [[de:common_attributes#a06\|o]] (de) und [[de:common_attributes#a18\|schacHomeOrganization]] (de)\| recommended \|
	^ 5. Other attributes that have to be defined (Attribute Resolver) ^^		^ 5. Other attributes that have to be defined (Attribute Resolver) ^^
-	\| ''eduPersonAssurance'' [[de:common_attributes#a14\|docs]] (de) \| see [[https://refeds.org/assurance\|REFEDS Assurance Framework]], [[de:aai:assurance_idp\|configuration examples]] \|	+	\| ''eduPersonAssurance'' [[de:common_attributes#a14\|docs]] (de) \| see [[https://refeds.org/assurance\|REFEDS Assurance Framework]] and [[de:aai:assurance_idp\|configuration examples for IdPs]] \|
	\| ''eduPersonEntitlement'' [[de:common_attributes#a10\|docs]] (de) \|\|		\| ''eduPersonEntitlement'' [[de:common_attributes#a10\|docs]] (de) \|\|
	\| ''eduPersonOrcid'' [[de:common_attributes#a13\|docs]] (de) \| possibly empty \|		\| ''eduPersonOrcid'' [[de:common_attributes#a13\|docs]] (de) \| possibly empty \|

contact

Anonymous (anonymous@undisclosed.example.com) — 2021-08-06T13:59:07+00:00

2021/08/06 15:47		aktuell
Zeile 7:		Zeile 7:
	Please note: The DFN-AAI hotline only provides support for questions concerning the federation in general as well as installation and configuration of SAML-enabled software with a main focus on Shibboleth. Due to the variety of possible implementation scenarios, no direct support can be provided for other kinds of web applications and IDM systems. Via the [[de:aai:mailinglists\|mailing lists]], federation participants may exchange their experiences.		Please note: The DFN-AAI hotline only provides support for questions concerning the federation in general as well as installation and configuration of SAML-enabled software with a main focus on Shibboleth. Due to the variety of possible implementation scenarios, no direct support can be provided for other kinds of web applications and IDM systems. Via the [[de:aai:mailinglists\|mailing lists]], federation participants may exchange their experiences.

-	Before submitting a support request, please check whether the question or problem is not already dealt with on the [[en:aai:faqs\|FAQ pages]] or the [[en:shibidp:troubleshooting\|Troubleshooting page]]. Thank you very much!	+	Before submitting a support request, please check whether the question or problem is not already dealt with on the [[en:aai:faqs\|FAQ]] or the [[en:shibidp:troubleshooting\|Troubleshooting]] pages. Thank you very much!

	==== Administrative Contact ====		==== Administrative Contact ====

faqs

Anonymous (anonymous@undisclosed.example.com) — 2021-07-27T06:25:05+00:00

2021/07/20 12:03		aktuell
Zeile 3:		Zeile 3:
	===== General questions =====		===== General questions =====

		+	* Where can I subscribe to DFN-AAI announcements? Please subscribe to this bilingual channel: [[https://www.listserv.dfn.de/sympa/info/dfn-aai-announce\|dfn-aai-announce@listserv.dfn.de]].
		+	* Any pitfalls in [[en:certificates#certificate_key_rollover_sp\|certificate rollover]]?
	* [[en:certificates#self-signed_certificates\|Verification of self-signed certificates]] for SAML communication		* [[en:certificates#self-signed_certificates\|Verification of self-signed certificates]] for SAML communication
	* [[en:shibidp:troubleshooting\|Troubleshooting and frequent error messages]]		* [[en:shibidp:troubleshooting\|Troubleshooting and frequent error messages]]
Zeile 8:		Zeile 10:
	* [[en:shibidp:troubleshooting#idp_is_not_displayed_in_discovery_services\|My IdP is not displayed in Discovery Services]]		* [[en:shibidp:troubleshooting#idp_is_not_displayed_in_discovery_services\|My IdP is not displayed in Discovery Services]]
	* Where can I find [[https://doku.tid.dfn.de/de:aai:attributes_best_practice\|recommended best practices]] concerning the use of attributes?		* Where can I find [[https://doku.tid.dfn.de/de:aai:attributes_best_practice\|recommended best practices]] concerning the use of attributes?
-	* Any pitfalls in [[en:certificates#certificate_key_rollover_sp\|certificate rollover]]?	+	* Where can I get in touch with other DFN-AAI participants? On this mailing list: [[https://www.listserv.dfn.de/sympa/info/dfn-aai-users\|dfn-aai-users@listserv.dfn.de]] (mostly but not only in German language).
	* Privacy / Data Protection (upcoming)		* Privacy / Data Protection (upcoming)

incidentresponse

Anonymous (anonymous@undisclosed.example.com) — 2019-07-18T14:02:23+00:00

2019/07/18 11:53		aktuell
Zeile 1:		Zeile 1:
	====== Incident Response ======		====== Incident Response ======

-	In case of security incidents that may affect other federation participants, please contact the DFN-AAI security team: [[security@aai.dfn.de\|]], phone: +49-40-808077-590	+	In case of security incidents that may affect other federation participants, please contact the DFN-AAI security team: \\
		+	[[security@aai.dfn.de\|]] \\
		+	phone: +49-40-808077-590

	We kindly ask all IdP and SP operators to provide a [[https://wiki.refeds.org/display/SIRTFI/Choosing+a+Sirtfi+Contact\|Security Contact (email)]] in the DFN-AAI metadata administration tool and to follow the recommendations of the Sirtfi Framework. Please refer to [[https://wiki.refeds.org/display/SIRTFI/SIRTFI+Home\|https://wiki.refeds.org/display/SIRTFI/SIRTFI+Home]]		We kindly ask all IdP and SP operators to provide a [[https://wiki.refeds.org/display/SIRTFI/Choosing+a+Sirtfi+Contact\|Security Contact (email)]] in the DFN-AAI metadata administration tool and to follow the recommendations of the Sirtfi Framework. Please refer to [[https://wiki.refeds.org/display/SIRTFI/SIRTFI+Home\|https://wiki.refeds.org/display/SIRTFI/SIRTFI+Home]]

mailinglists

Anonymous (anonymous@undisclosed.example.com) — 2021-03-04T07:27:47+00:00

2026/06/14 20:10	aktuell
Zeile 1:	Zeile 1:
	+	~~NOTOC~~
	+	====== Mailing lists ======
	+	===== DFN-AAI =====
	+	DFN-AAI runs two mailing lists, one for information and one for community discussions:
	+	\| dfn-aai-announce@listserv.dfn.de \| Announcements concerning the federation, security issues, software updates, etc. (bilingual)\| [[https://www.listserv.dfn.de/sympa/info/dfn-aai-announce\|Subscribe]] \|
	+	\| dfn-aai-users@listserv.dfn.de \| Discussions and support within DFN-AAI community (mostly in German) \| [[https://www.listserv.dfn.de/sympa/info/dfn-aai-users\|Subscribe]] \|
	+	We recommend to subscribe at least to [[https://www.listserv.dfn.de/sympa/info/dfn-aai-announce\|dfn-aai-announce@listserv.dfn.de]] so that we can inform you about security issues, policy changes and other technical or organizational measures.

	+	===== Shibboleth =====
	+	See https://wiki.shibboleth.net/confluence/display/WEB/Mailing+Lists
	+	* Announce, announce@shibboleth.net
	+	* Users, users@shibboleth.net
	+	* Dev, dev@shibboleth.net
	+	We recommend to subscribe at least to [[announce-subscribe@shibboleth.net\|announce@shibboleth.net]] to stay informed about new software versions and security updates.

mdq

Anonymous (anonymous@undisclosed.example.com) — 2024-02-02T08:44:18+00:00

2023/01/12 19:31		aktuell
Zeile 20:		Zeile 20:

	Certificate for the validation of the signature of DFN-AAI MDQ Metadata (PEM format) \\		Certificate for the validation of the signature of DFN-AAI MDQ Metadata (PEM format) \\
-	SHA256 Fingerprint: 73:5B:9E:76:8A:A6:33:73:4D:3E:C6:D2:1E:98:B3:D9:03:74:B9:87:16:52:16:53:32:26:9A:B2:55:FC:CA:D2 \\	+	SHA256 Fingerprint: 75:18:98:F6:E8:23:21:E8:B1:DC:71:6B:D0:AB:50:F0:C2:DB:9D:CE:4B:2B:A1:88:B1:42:DB:99:13:DB:0D:E9 \\
	https://www.aai.dfn.de/metadata/dfn-aai-mdq.pem		https://www.aai.dfn.de/metadata/dfn-aai-mdq.pem

portfolio

Anonymous (anonymous@undisclosed.example.com) — 2026-06-01T13:29:47+00:00

2024/07/07 15:49		aktuell
Zeile 1:		Zeile 1:
-	FIXME This page is not fully translated, yet. Please help completing the translation.\\ //(remove this paragraph once the translation is finished)//

	===== DFN-AAI service portfolio =====		===== DFN-AAI service portfolio =====

2021/12/14 18:10		aktuell
Zeile 23:		Zeile 23:
	\| ''schacHomeOrganization'' and ''o'' Documentation about [[de:common_attributes#a06\|o]] (de) und [[de:common_attributes#a18\|schacHomeOrganization]] (de)\| recommended \|		\| ''schacHomeOrganization'' and ''o'' Documentation about [[de:common_attributes#a06\|o]] (de) und [[de:common_attributes#a18\|schacHomeOrganization]] (de)\| recommended \|
	^ 5. Other attributes that have to be defined (Attribute Resolver) ^^		^ 5. Other attributes that have to be defined (Attribute Resolver) ^^
-	\| ''eduPersonAssurance'' [[de:common_attributes#a14\|docs]] (de) \| see [[https://refeds.org/assurance\|REFEDS Assurance Framework]], [[de:aai:assurance_idp\|configuration examples]] \|	+	\| ''eduPersonAssurance'' [[de:common_attributes#a14\|docs]] (de) \| see [[https://refeds.org/assurance\|REFEDS Assurance Framework]] and [[de:aai:assurance_idp\|configuration examples for IdPs]] \|
	\| ''eduPersonEntitlement'' [[de:common_attributes#a10\|docs]] (de) \|\|		\| ''eduPersonEntitlement'' [[de:common_attributes#a10\|docs]] (de) \|\|
	\| ''eduPersonOrcid'' [[de:common_attributes#a13\|docs]] (de) \| possibly empty \|		\| ''eduPersonOrcid'' [[de:common_attributes#a13\|docs]] (de) \| possibly empty \|

2021/07/20 12:03		aktuell
Zeile 3:		Zeile 3:
	===== General questions =====		===== General questions =====

		+	* Where can I subscribe to DFN-AAI announcements? Please subscribe to this bilingual channel: [[https://www.listserv.dfn.de/sympa/info/dfn-aai-announce\|dfn-aai-announce@listserv.dfn.de]].
		+	* Any pitfalls in [[en:certificates#certificate_key_rollover_sp\|certificate rollover]]?
	* [[en:certificates#self-signed_certificates\|Verification of self-signed certificates]] for SAML communication		* [[en:certificates#self-signed_certificates\|Verification of self-signed certificates]] for SAML communication
	* [[en:shibidp:troubleshooting\|Troubleshooting and frequent error messages]]		* [[en:shibidp:troubleshooting\|Troubleshooting and frequent error messages]]
Zeile 8:		Zeile 10:
	* [[en:shibidp:troubleshooting#idp_is_not_displayed_in_discovery_services\|My IdP is not displayed in Discovery Services]]		* [[en:shibidp:troubleshooting#idp_is_not_displayed_in_discovery_services\|My IdP is not displayed in Discovery Services]]
	* Where can I find [[https://doku.tid.dfn.de/de:aai:attributes_best_practice\|recommended best practices]] concerning the use of attributes?		* Where can I find [[https://doku.tid.dfn.de/de:aai:attributes_best_practice\|recommended best practices]] concerning the use of attributes?
-	* Any pitfalls in [[en:certificates#certificate_key_rollover_sp\|certificate rollover]]?	+	* Where can I get in touch with other DFN-AAI participants? On this mailing list: [[https://www.listserv.dfn.de/sympa/info/dfn-aai-users\|dfn-aai-users@listserv.dfn.de]] (mostly but not only in German language).
	* Privacy / Data Protection (upcoming)		* Privacy / Data Protection (upcoming)