Federation Technical Guide
The Federation Technical Guide provides a convenient way to locate the details and documentation for implementing federated identity management with InCommon.
| Table of Contents | |
|---|---|
|
...
|
Precursors to Technical Implementation
- Review your practices and publish your POP
- Install/Configure a SAML 2.0 Compliant federating software
- Support the eduPerson Schema
- Configure IdP attribute resolver for the appropriate sources
- Configure the IdP to release the right attributes
SAML
- What is SAML?
- Benefits of SAML2
- IdP Support for SAML2
- SAML 2.0 FAQ
- SAML 2.0 profiles
- SP Support for SAML2
Starting with InCommon
See How to Get Started in the InCommon Federation for an introduction to non-technical aspects of InCommon Federation participation.
Technical Implementation
Starting with InCommon
- Shibboleth IdP installation guide
- Shibboleth SP installation guide
- Supported software
- Shibboleth installation guides
- Shibboleth installation training
- Testing your IdP
- Testing your SP
- Establishing Naming and establishing your EntityID
- Registering your system in the federation: metadata
- Establishing your primary DNS domain
Identity Attributes
- Attribute Overview
- InCommon Attribute Summary
- eduPerson Schema
Federation Manager
Metadata
- General Information
- Metadata administration
- IdP Metadata Elements
- SP Metadata Elements
- InCommon Metadata Schema
- Contacts in Metadata
- Endpoins in Metadata
- Entity IDs
- Error Handling URL
- New IdPs in Metadata
- Scope in metadata
- x.509 certificates in metadata
- Metadata consumption
- User interface elements
Discovery
- General Information
- Configuring metadata for discovery
- configuring SAML SP software
- discovery service FAQ
- configuring Shibboleth for InCommon Discovery Service
Service Providers
- Install/operate/manage SAML SP software
- Connect services to be federated to the software and enable them to use incoming attributes to control access
- Add SP information to metadata
- Configure SP to use federatoin maetadata and credentials and refresh
- Document how SP could authrize users, given the provided attributes
- Document how your application could use the supplied attributes in alternative ways, such as for customization or form completion
Advanced
Recommended Practices
Advanced Topics
Recommended Practices
The InCommon community has developed a set of recommended practices for many aspects of federation practice. You can navigate to the Recommended Practices page for these and other topics:
- Organizational PresenceOrganizational Presence
- POP
- Contacts in Metadata
- Federated Security Incident Response
- Technical Basics
- Metadata consumption (refreshed daily)
- Scope in Metadata (DNS domain controlled by SPIdP)
- x.509 certificates in metadata
- How better attribute management helps federation
...
- SAML protocol endpoints
- User Interface elements in metadata (IdP and SP)
- Requested attributes
Research and Scholarship Category
- in metadata
- Operational Maturity
- Maintaining supported software
- Federation user experience
- Maximizing the Federation
- Identity Provider attribute release process
- Persistent identifier support
- What is a category of Service Providers?
- Candidate services
- Requirements for R&S Service Providers
- R&S Category Attributes
- Policy considerations for IdPs
- FAQ for IdPs