Page tree

Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: Published by Scroll Versions from space federationedit and version 1.5

Jump to: 

Table of Contents
maxLevel1
exclude(On this page)|(In this section)|(Related content)|(Get help)
typeflat
separatorpipe

Federation Manager is the web portal for administering the InCommon metadata. Participants and Federation Operations staff use this application to register, update, and publish metadata. 

Federation Manager is used by Site Administrators responsible for creating and maintaining SAML metadata on behalf of their organization.

How does Federation Manager work?

Each Participant organization designates up to 2 authorized individuals to manage metadata on its behalf. These individuals are called Site Administrators. 

The metadata submitted by a site administrator is vetted and approved by the InCommon Registration Authority (RA).  The RA checks submissions to make sure  that the entity ID and endpoints (IdP SSO Settings, SP SSO Settings) in metadata meet accuracy and information integrity requirements.

Designate Site Administrators

Upon joining the InCommon Federation, a participant needs to is designate one (preferably two) Site Administrator(s) to manage metadata. Beyond the obvious advantages of having a trained administrator for backup purposes, multiple Site Administrators has security advantages as well. Like password changes, metadata updates generate email notifications to all designated Site Administrators, which helps prevent both honest mistakes and malicious activity.

Using Federation Manager to manage your metadata

Diving deeper

The following deployment strategy forces all protocol traffic over the front channel, which is easier to troubleshoot, manage, and maintain.

Tip
titleRecommended Protocol Support for New IdPs
  • DO support SAML2 Web Browser SSO on the front channel
  • DO NOT support back-channel SAML protocols

In this section

Children Display
depth1

Related content

Content by Label
showLabelsfalse
max10
showSpacefalse
cqllabel = "metadata" and space = "federation"


Get help

Can't find what you are looking for?

Button Hyperlink
iconhelp
titleAsk the community
typeprimary
urlask-the-community