General Information
How do I register? / I'm having problems registering.
Refer to the Registration Guide and other FAQs below.
If you are still having difficulty , please email collaboration-support@internet2.edu and include details about how you are trying to register and what issue you are encountering.
What if I cannot find my home organization on the list of Identity Providers?
This likely means that your organization is not in a supported Federation such as InCommon. You can look up your home organization here to see what its InCommon status is.
You can learn more about your organization joining the InCommon Federation here.
When your home organization is not available, you can choose to register using a Gmail account or an Internet2 Guest account. See the Registration Guide for more details.
If your organization is in the InCommon Federation and still not showing up on the list of Identity Providers, it may be set to 'Hide from Discovery'. Please discuss with your Identity Provider operators.
NOTE: If you register a Google or Internet2 Guest account, you will select that respective login option each time you log in, as opposed to selecting your home institution.
When I log in with my home organization, I immediately receive an error.
(Common error message: "opensaml::FatalProfileException")
Your home organization must be appropriately configured to share information with our systems. Your Identity Provider Operators can refer to our guide for more details.
If you don't know who your operators are, please get in touch with your local help desk and provide them with this information.
NOTE: This service requires your home organization to provide: Name, Email Address, and eduPersonPrincipalName (ePPN). This will automatically happen if your organization supports the R&S entity category. This service also requires signed responses and will reject assertions where only the assertion is signed. This requirement is to help mitigate signature wrapping attacks and complies with the "SAML V2.0 Implementation Profile for Federation Interoperability" standard published here (specification IIP-SP13).
For Federation Manager
When trying to log into Federation Manager, I receive "Invalid Username or password".
The Federation Manager login page has two sections; "Site Administrator Login" and "IAM Login".
If you have registered an account and completed the Federation Manager Invite process, you should be choosing the "IAM Login" option.
This will take you to the discovery service where you will choose your Identity Provider in order to authenticate.
NOTE: If you register a Google or Internet2 Guest account, you will select that respective login option each time you log in, as opposed to selecting your home institution.
When trying to log into Federation Manager, I receive "Your account linking has not yet been completed, please use the enrollment URL from your invitation to complete the process".
Check if you received an email invitation with the subject line "Enroll with the Internet2 Federation Manager". If it came in the last seven days, you should be able to click the enrollment link and go through authentication to complete the link. If you have not received one of those emails in the last seven days, you can contact help@incommon.org for assistance.
Site Admins:
From the left side panel, InCommon Federation Site Administrator, log into the Federation Manager using your existing username and password. Once you log in, you will see a banner on the top of your screen with a “Resend Internet2 IAM Platform enrollment email” button. Clicking this will send a fresh token valid for 7 days to your email address on record. If this does not resolve your issue or you have questions, please contact help@incommon.org for further assistance.
How do I change the log in (identity) I use for federation manager?
During federation manager enrollment, you are invited to link with a federated identity, Google account, or as an Internet2 Guest. In the event that you need to change from your original selection, you are able to request assistance on resetting your FM Enrollment . Please contact. help@incommon.org and our support staff will issue a new invitation to your email address on record.
As a Site Admin I recently made changes to my Identity Provider (IdP) and now I can’t log into the Federation Manager.
Changes you make to your IdP that are submitted for publication are published Monday-Friday at approximately 3:00 ET. In the event that you find that the changes to your IdP have subsequently resulted in you being unable to log into the Federation Manager, you’ll need assistance associating your user record to an alternate identity (Google or Internet2 Guest). Please contact help@incommon.org and our support staff will issue a new invitation to your email address on record.
Still need help?
I couldn't find an answer to my question and still need help.
Contact collaboration-support@internet2.edu for further assistance. Please include thorough details so we can assist.