After several months of communication with participants, InCommon Operations removed the legacy metadata download endpoint (currently, a redirect) on Wednesday, February 14, 2018
All metadata clients that attempt to download metadata from this endpoint should have switched to one of the production endpoints noted in: Metadata Aggregates before that date. Failure to update to the production metadata locations has likely caused your SAML deployment to break on February 27, 2018 at approximately 2:44 p.m. US Eastern Time.
For many years, InCommon has supported a redirect from a very old metadata download location:
http://wayf.incommonfederation.org/InCommon/InCommon-metadata.xml
And
https://wayf.incommonfederation.org/InCommon/InCommon-metadata.xml
To the current production (“main”) aggregate location:
http://md.incommon.org/InCommon/InCommon-metadata.xml
On February 14, 2018, InCommon Operations REMOVED this redirect.
It is CRITICAL that all production metadata clients be configured to fetch metadata from http://md.incommon.org/InCommon/InCommon-metadata.xml or one of the other three locations on md.incommon.org.
If you currently fetch metadata from one of the old (wayf.incommonfederation.org) locations noted above, you need to reconfigure your deployment. Failure to do so means that your IdP and/or SPs broke on February 27, 2018.
At the bottom of this page, you will find a list of hosts, updated weekly, that are still downloading metadata from the old location. If you see a host on the list that is at your organization, please contact the relevant systems personnel to arrange to switch metadata consumption to one of the supported aggregates.
Please pass along this information to anyone in your organization who is responsible for running an IdP or SP in InCommon, especially those such as delegated administrators or other systems administrators who may not be subscribed to this mailing list.
| Domains with hosts still attempting to use legacy metadata endpoint | |
|---|---|
| 1 | acm.org |
| 2 | amazonaws.com |
| 3 | anl.gov |
| 4 | atg.travel |
| 5 | atomiclearning.com |
| 6 | berkeley.edu |
| 7 | blackboard.com |
| 8 | brainerd.net |
| 9 | cengage.com |
| 10 | charter.com |
| 11 | cloudtricity.com |
| 12 | cmu.edu |
| 13 | code42.com |
| 14 | com.uy |
| 15 | duke.edu |
| 16 | eth0-0-fw3-1-ap-q18-va2.mhint |
| 17 | eth0-0-fw3-1-ap-r137-3-va3.mhint |
| 18 | everestdc.com |
| 19 | expedient.com |
| 20 | fisc.com |
| 21 | fischerinternational.com |
| 22 | gatech.edu |
| 23 | googleusercontent.com |
| 24 | illinois.edu |
| 25 | imleagues.com |
| 26 | in-addr.arpa |
| 27 | internet2.edu |
| 28 | iu.edu |
| 29 | jhsph.edu |
| 30 | jhu.edu |
| 31 | mbl.edu |
| 32 | mtu.edu |
| 33 | northamericancoax.com |
| 34 | NYU.EDU |
| 35 | osumc.edu |
| 36 | proxad.net |
| 37 | refworks.com |
| 38 | rfsuny.org |
| 39 | sdstate.edu |
| 40 | serialssolutions.com |
| 41 | siteprotect.com |
| 42 | surf.nl |
| 43 | surfnet.nl |
| 44 | t2hosted.com |
| 45 | thomsonreuters.com |
| 46 | trln.org |
| 47 | trondent.com |
| 48 | uark.edu |
| 49 | ucmerced.edu |
| 50 | ucsf.edu |
| 51 | ucsfmedicalcenter.org |
| 52 | uic.edu |
| 53 | uninett.no |
| 54 | utsystem.edu |
| 55 | uw.edu |
| 56 | vizientinc.com |
| 57 | webair.com |
| 58 | whoi.net |
| 59 | wm.edu |
| 60 | wpi.edu |
The information below was last updated on Thursday, March 12, 2018.
IMPORTANT: The table on the left is a list of root DNS zones with hosts still attempting to access the legacy metadata location. The table on the right is a list of actual hosts still attempting to access the legacy metadata.
REMINDER: When you make a configuration change to target one of the current production metadata aggregate locations, you may need to restart your SAML SP software (shibd/etc) to cause it to re-read the configuration.