Giter Site home page Giter Site logo

spf-sps-metadata's Introduction

Travis Status Latest Release Commits Since Latest Release

Metadata sources for service providers inside the CLARIN Service Provider Federation

Notes for service provider operators

⚠️ The structure of this repository has changed on 10/02/2020, please make sure to update your forks before creating new pull requests. See the repository system changelog for a detailed description of the changes.

ℹ️ Here is a video exemplifying the process of updating the metadata of your SP without leaving the GitHub interface or resorting to use the git command.

To update or add SAML metadata for your SP:

  1. Fork this repository.
  2. Make your changes in the file corresponding to your SP inside the metadata/ directory. In case you are adding a new SP, add the metadata by creating a new file following the same naming convention: [New SP File Name] = [SP entityID].replace("http(s)?://", "").replace("/", "%2F") + ".xml"
  3. Create a pull request to the master branch of this repository.
  4. Wait for Travis CI to finish the XSD validation on your pull request.
  5. Make sure your pull request is XSD valid. Fix your metadata based on the Travis CI output information and update the pull request until XSD validation passes.
  6. Wait for your pull request to be merged into the master branch by a CLARIN SPF operator. This will trigger the generation of an aggregated quality assurance (QA) report by Travis CI.
  7. Wait for Travis CI to finish the generation of the aggregated QA report. The CLARIN bot will write a comment on the pull request once the generation is complete, linking to the new aggregated QA report and to any individual SP report which has changed due to your pull request. At this point, a CLARIN SPF operator might also request futher changes not covered by the QA automated testing.
  8. In your fork, fix all issues concerning your SP described in the QA report and submit a new pull request.

After a pull request is created (3.) the SAML metadata checker script will automactically perform an XSD validation on the pull request metadata via Travis CI (4.). The result of this check will be visible on the pull request page. Check the existing pull resquests on this repository for examples.

When your pull request successfully passes XSD validation (5.), a CLARIN SPF operator will merge it into the master branch of original repository for QA assessment (6.).
Note that the SPF operators will only consider merging pull requests which are XSD valid. If you cannot make your file successfully pass the XSD validation or you believe you are hitting a false positive. Please create an ​issue explaining the problem.

After your pull request is merged (6.), Travis CI will automatically analyze the latest master version and generate a new QA report visible in ​this page (7.). When this operation has finished, the CLARIN bot](https://github.com/clarin-bot) will write a comment on the pull request linking to the new aggregated QA report and to any individual SP report which changed. Please ascertain that you comply with ​the SAML metadata guidelines. Mind to check and resolve issues in the SAML metadata quality for your SP after your pull request has been merged into the master branch, then update your fork and create a new pull request with any necessary fixes (8.). Make sure you always update the SAML metadata template of your SP to make it correspond exactly with the SAML metadata you deposit here (see e.g. ​https://goo.gl/uysudA).

If you wish that the registration/modification of the SAML metadata about your SP with identity federations is coordinated extra carefully (say, you perform a key rollover), then please create a new ​issue describing the task. Alternatively you can also head over to https://trac.clarin.eu/newticket and create a ticket for the 'AAI' Trac component (requires a CLARIN 'developer' account).

Finally your metadata will be released and picked up by an hourly cron job which automatically downloads the latest available release from this repository and publishes it at ​https://infra.clarin.eu/aai/md_about_spf_sps.xml (staging feed) and https://infra.clarin.eu/aai/prod_md_about_spf_sps.xml (production feed).

Note: For an SP to be published in the production feed it must be defined first with production status in the CLARIN CentreRegistry. This can only be done by CLARIN SPF operators.

spf-sps-metadata's People

Contributors

alessandroenea avatar andmor- avatar bartjongejan avatar benhur1999 avatar coltekin avatar dietervu avatar dpancic avatar drengur avatar galanisd avatar hemed avatar inlgit avatar janpieterk avatar jcklie avatar jochengraf avatar kaizimmer1 avatar kosarko avatar kreetrapper avatar marsav00 avatar martinhennelly avatar mmatthiesencsc avatar paulmeurer avatar pautri avatar riccardodg avatar rvanvliet avatar tancque avatar thomaskisler avatar ttrippel avatar vidiecan avatar willemelbers avatar woseseltops avatar

Stargazers

 avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar

spf-sps-metadata's Issues

Lack of errors in the QA report indicates either a valid PR or just an old QA report

When a PR with no errors is merged, the QA report should be regenerated. But since the QA report only displays the errors there's no way to know if the lack of errors in the QA report indicates a valid PR or if the QA report is just old. Adding a timestamp to the report should be enough.

Alternatively, the readme could specify how long to wait for the report.

key rollover for lindat

I'll follow with a PR containing the new cert.
Some time after that I'll follow with another PR removing the old key.

Corpuscle issue with transient SAML attributes

Hi Dieter,

I am trying to debug this. When running the assertion-consumer, I get the following error message:


<?xml version="1.0"?>
<urn:Response xmlns:urn="urn:oasis:names:tc:SAML:2.0:protocol" IssueInstant="2018-08-09T07:50:12.967Z" ID="SAMLY2lib_msg_f14bb3bb592fadbff9c85328d5859f6e5c89eb376a6b32eb" Version="2.0" InResponseTo="_3D2F13B40675FA2EF8940060D942C38D">
<urn1:Issuer xmlns:urn1="urn:oasis:names:tc:SAML:2.0:assertion" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity">https://idm.clarin.eu&lt;/urn1:Issuer>
<urn:Status>
<urn:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Responder"/>
<urn:StatusMessage>There is no identity of the requested 'urn:oasis:names:tc:SAML:2.0:nameid-format:transient' SAML identity format for the authenticated principial.</urn:StatusMessage>
</urn:Status>
</urn:Response>




Perhaps you have an

Link: Conversation with Lucie Wagner


Intercom Operator will send a note to this conversation when this issue is closed.

Key rollover clarin.phonetik.uni-muenchen.de

The Shibboleth certificate of the Institute of Phonetics and Speech Processing at LMU Munich expires on Sun, 05 Dec 2021.
I would like to start the key rollover process for the host clarin.phonetik.uni-muenchen.de.

certificate roll-over metadata update question

Dear CLARIN-ERIC/SPF-SPs-metadata Team,

We are currently in the process of performing a certificate roll-over and want to update our metadata accordingly. Unfortunately our own documentation of the process is fairly outdated, so I just wanted to double check that I have understood the process correctly. Do I/we simply place our new <ds:KeyName>Standby</ds:KeyName> key into this location and submit a pull-request? Sorry if this is a stupid question and/or I have missed the information about what exactly we have to do in case of a certificate roll-over.

Thanks in advance

Greetings from Munich

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.