2016 Holiday Technology Checklist for InCommon Site Administrators

...

1. Upgrade to Shibboleth IdP V3 now!
   
   1. Shibboleth IdP V2 reached end-of-life on July 31, 2016
   2. For a list of IdPs that have (or have not) upgraded to V3, see: List of Shibboleth IdPs by Version
   3. TIP: Shibboleth IdP V3.3.0 was announced on November 11, 2016
2. Support the global Research & Scholarship Category!
   
   1. Information for SP owners wishing to apply for R&S
   2. Information for IdP operators wanting to support R&S SPs
   3. See: List of Research and Scholarship Entities as of 1/27/2017
3. Support the InCommon Federated Error Handling Service!
   1. Add an Error Handling URL (errorURL) to your IdP metadata
   2. To check if your errorURL is working properly, see: List of errorURLs in IdP Metadata
   3. Add an administrative contact to IdP metadata (see: Contacts in Metadata)
4. Migrate to the REFEDS security contact
   1. Simply touch your metadata ("Edit" => "Save" => "Submit") to convert an existing security contact to the new REFEDS syntax
   2. To check if your metadata includes a legacy security contact, see: List of Entities with Legacy Security Contacts
5. Is your IdP discoverable?
   1. Tweak your IdP DisplayName in metadata (if necessary)
   2. Add a Logo URL to IdP metadata (and publish a favicon on your IdP server)
   3. Learn more about the Hide From Discovery Category
6. Harden the TLS configuration on your IdP server
   
   1. Analyze the TLS configuration of your IdP server using SSL Labs

...