- Created by Albert Wu (internet2.edu), last modified by Ming Ho on Feb 17, 2020
The registered-by-incommon
entity category is added to the metadata for every entity that has been registered through InCommon's Registration Authority (RA) processes. It allows for quick determination if a specific entity has met the requirements outlined in the InCommon Participation Agreement and the documents it references. Practically speaking, the registered-by-incommon
entity attribute can used by SP and IdP deployments to reverse the effects of importing eduGAIN entities (which may not adhere to the same participation requirements) into the InCommon production aggregate. See eduGAIN Considerations for InCommon Execs for more information regarding international interfederation.
Currently all entity metadata in the InCommon production aggregate were registered by the InCommon registrar and therefore every entity descriptor contains the following extension element:
<md:Extensions xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi"> <mdrpi:RegistrationInfo registrationAuthority="https://incommon.org"/> </md:Extensions>
The value of the registrationAuthority
XML attribute in the previous extension element is the ID of the InCommon registrar. Every metadata registrar has such a globally unique identifier. As other metadata (such as eduGAIN metadata) is imported into the InCommon aggregate, the <mdrpi:RegistrationInfo>
element will become a distinguishing characteristic of entity metadata.
info Examples: using the Registered By InCommon Category
Since the <mdrpi:RegistrationInfo>
element is not widely supported in software, every occurrence of mdrpi:RegistrationInfo/@registrationAuthority="
https://incommon.org/
"
in metadata is replicated as a fixed entity attribute. This makes it easier for consumers to determine whether the registrar of a given entity descriptor is the InCommon registrar. This is the sole purpose of the Registered By InCommon Category.
<md:Extensions xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute"> <mdrpi:RegistrationInfo registrationAuthority="https://incommon.org"/> <mdattr:EntityAttributes xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"> <saml:Attribute NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" Name="http://macedir.org/entity-category"> <saml:AttributeValue> http://id.incommon.org/category/registered-by-incommon </saml:AttributeValue> </saml:Attribute> </mdattr:EntityAttributes> </md:Extensions>
Note that the Registered By InCommon entity category applies to both SPs and IdPs. The semantics of the registered-by-incommon
entity attribute are identical to mdrpi:RegistrationInfo/@registrationAuthority="
https://incommon.org
"
.
In this section
Related content
-
Page:
-
Page:
-
Page:
-
Page:
-
Page:
-
Page:
-
Page:
-
Page:
-
Page:
-
Page:
Get help
Can't find what you are looking for?