...
- Publish federated incident response contact information for your federated services and identity providers.
- Implement a log retention policy for federated services and identity providers.
- Document and advertise your procedure for responding to a federated security incident.
Technical Basics
Maintaining complete and accurate information in InCommon metadata is important so systems from other federation participants can best engage with your site's services.
...