Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: Published by Scroll Versions from space federationedit and version 4.0.2

The registered-by-incommon entity category is added to the metadata for every entity that has been registered through InCommon's Registration Authority (RA) processes. It allows for quick determination if a specific entity has met the requirements outlined in the InCommon Participation Agreement and the documents it references. Practically speaking, the registered-by-incommon entity attribute can used by SP and IdP deployments to reverse the effects of importing eduGAIN entities (which may not adhere to the same participation requirements) into the InCommon production aggregate. See eduGAIN Considerations for InCommon Execs for more information regarding international interfederation.

Currently all entity metadata in the InCommon production aggregate were registered by the InCommon registrar and therefore every entity descriptor contains the following extension element:

Code Block
languagexml
themeConfluence
titleThe RegistrationInfo element in InCommon metadata
<md:Extensions xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi">
  <mdrpi:RegistrationInfo registrationAuthority="https://incommon.org"/>
</md:Extensions>

The value of the registrationAuthority XML attribute in the previous extension element is the ID of the InCommon registrar. Every metadata registrar has such a globally unique identifier. As other metadata (such as eduGAIN metadata) is imported into the InCommon aggregate, the <mdrpi:RegistrationInfo> element will become a distinguishing characteristic of entity metadata.

Button Hyperlink
iconinfo
titleExamples: using the Registered By InCommon Category
typesubtle
urlExamples - Using the Registered by InCommon category

Since the <mdrpi:RegistrationInfo> element is not widely supported in software, every occurrence of mdrpi:RegistrationInfo/@registrationAuthority="https://incommon.org/" in metadata is replicated as a fixed entity attribute. This makes it easier for consumers to determine whether the registrar of a given entity descriptor is the InCommon registrar. This is the sole purpose of the Registered By InCommon Category.

Code Block
languagexml
themeConfluence
titleThe registered-by-incommon entity attribute
<md:Extensions
    xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi"
    xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
  <mdrpi:RegistrationInfo registrationAuthority="https://incommon.org"/>
  <mdattr:EntityAttributes xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
    <saml:Attribute
        NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"
        Name="http://macedir.org/entity-category">
      <saml:AttributeValue>
        http://id.incommon.org/category/registered-by-incommon
      </saml:AttributeValue>
    </saml:Attribute>
  </mdattr:EntityAttributes>
</md:Extensions>

Note that the Registered By InCommon entity category applies to both SPs and IdPs. The semantics of the registered-by-incommon entity attribute are identical to mdrpi:RegistrationInfo/@registrationAuthority="https://incommon.org".


In this section

Children Display
depth1
pageRegistered by InCommon category

Related content

Content by Label
showLabelsfalse
max10
showSpacefalse
cqllabel = "entity-category" and space = "federation"


Get help

Can't find what you are looking for?

Button Hyperlink
iconhelp
titleAsk the community
typeprimary
urlask-the-community