Child pages
  • Migrating an SP to Global Research and Scholarship

The Incommon Federation wiki has moved.

Please visit the new InCommon Federation Library wiki for updated content. Remember to update your bookmarks.

Click in the link above if you are not automatically redirected in 15 seconds.

Skip to end of metadata
Go to start of metadata

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 6 Next »

Migrating an SP to the Global Research and Scholarship Category

This topic is for owners of existing Research & Scholarship (R&S) SPs.

Existing R&S IdPs in the InCommon Federation are currently in the process of migrating to global R&S. New R&S IdPs will be encouraged to support global R&S as well. More importantly, InCommon will soon begin importing the metadata of R&S IdPs from other federations. In anticipation of these events, existing R&S SP owners should begin to develop a migration strategy to global R&S.

All R&S SPs in the InCommon Federation now meet the requirements of the international REFEDS Research & Scholarship Entity Category specification and therefore all R&S SPs have a multivalued R&S entity attribute in InCommon metadata. In that sense, all R&S SPs have successfully migrated to global R&S. However, if an R&S SP depends on the R&S entity attribute in IdP metadata, then additional migration steps are required since the entity attributes in IdP metadata will change as IdPs declare their support for global R&S.

For example, a small number of R&S SPs are known to filter IdP metadata such that R&S IdPs are the only IdPs exposed on the SP's discovery interface. Such an SP is dependent upon the R&S entity attribute in IdP metadata.

If your SP deployment depends on the R&S entity attribute in IdP metadata, please read on. Otherwise there is nothing further you need to do.

An SP deployment that depends on the R&S entity attribute in IdP metadata almost certainly recognizes the legacy R&S entity attribute value:

Such an SP may also want to recognize the R&S entity attribute value

since IdPs that support global R&S will necessarily carry the latter in their metadata. Indeed, R&S IdPs from other federations will carry the R&S tag exclusively.

An R&S IdP carries a single-valued entity attribute in its metadata

An R&S IdP will carry either the R&S tag or the R&S tag, but not both. An SP that depends on the R&S entity attribute in IdP metadata must take this fact into account.

For example, a Shibboleth SP that restricts its discovery interface to R&S IdPs might configure the following:

A Shib configuration that recognizes an R&S entity attribute in IdP metadata
    The following MetadataProvider attempts to refresh the 
    InCommon production metadata aggregate every hour.
<MetadataProvider type="XML"
    backingFilePath="InCommon-metadata.xml" maxRefreshDelay="3600"

  <!-- Verify the signature on the metadata file -->
  <MetadataFilter type="Signature" certificate="inc-md-cert.pem"/>

      Require a validUntil XML attribute on the EntitiesDescriptor element
      and make sure its value is no more than 14 days into the future
  <MetadataFilter type="RequireValidUntil" maxValidityInterval="1209600"/>

      As the R&S tag becomes more prevalent, the
      order of the attributes should be reversed for efficiency.
  <MetadataFilter type="Whitelist" matcher="EntityAttributes">





  • No labels