Date: 22. February 2016
Time: 11.00 - 12.15 CET
Location: <https://connect.sunet.se/enabling-users>
Agenda
- Status updates on work packages
- Discuss idea of CLARIN-specific entity category
Attendees
- Lukas Hämmerle, GÉANT
- Sami Silen, GÉANT
- Timo Mustonen, GÉANT
- Wolfgang Pempe, GÉANT
- Martin Matthiesen, CLARIN
- Dieter Van Uytvanck, CLARIN
1. Status updates on work packages
- CLARIN eduGAIN Integration
1.A. Get a long-term agreement/solution/process with a Still being reviewed by DFN-AAI management. Wolfgang reports that there is positive feedback on having an agreement in general (no feedback yet on any details in the agreement).
2.A. Attribute Release Check Current test version available http://earc.eduid.hu/ Feedback and suggestions for improvements are welcome. Martin and Dieter don't think a CLARIN-specific/flavored instance is needed because generic service should be sufficient. Invest effort rather to make generic service known and used.
2.B. CoCo/R&S support for CLARIN's most wanted-IdPs? list. A follow up in a few weeks to see if another reminder (sent to the federation operators of affected IdPs?/federations) could help. Determining the impact of informing federation operators is difficult to measure. Wolfang reports that in at least one case an IdP admin has applied changes to attribute release policy.
2.C. Improving error messages for SPs Sami has created a wiki page with instructions on how to configure a standard Shibboleth SP 2.5 (or newer) to check if certain attributes are present and if not, show a custom (user-friendly) error pages including an tracking image that can be used to inform a central (community-specific) web server about affected IdP/SP/missing attributes. The page is available at: https://confluence.csc.fi/display/HAKA/Shibboleth+SP+attribute+checker An example SP that is set up like this can be tested here: https://devsp.funet.fi/secure/ (Use username/password: teppo/testaaja) Martin will apply these instructions to one or more of his SPs to test drive them.
2. Discuss idea of CLARIN-specific entity category
The consensus of pro/contra discussion (about introducing/using a CLARIN-specific entity category to be used for better attributes release in some federations) was: Let's give it try.
As it is not too late to change the entity category value that currently is used in DFN-AAI ("http://aai.dfn.de/category/clarin-member") by at least one IdP, we should define a more generic value for CLARIN SPs.
Wolgang is willing to change the value and update the instructions to a clarin.eu value if CLARIN is ok with allowing to use an entity category value containing clarin.eu instead of aai.dfn.de. Martin would be ok with allowing to use a clarin.eu value but also wants to have Dieter to approve this.
Next Meeting
- 7. March 11.00 CET,12.00 Helsinki time https://connect.sunet.se/enabling-users
Actions
- Lukas: Ask Olivier to check/add if there is a profile without any attributes
- Dieter/Martin?: Provide Wolfgang a clarin.eu URL that could be used to identify CLARIN SPs with an entity category value (and generally allow Wolfgang to apply this value to CLARIN SPF metadata), e.g. http://clarin.eu/category/clarin-member"
- All: Send feedback/suggestions to Sami on error page https://devsp.funet.fi/secure
