|
|
|
|
IdP Upgrade – Special Edition
The AAF would like to thank all IdP Administrators for their great work to date in resolving Boost issues and upgrading their IdP to the latest V2 of Shibboleth (V2.4.4). It is now time to begin planning for the next phase of certificate updates and upgrading to Shibboleth V3.
|
|
|
Coming activities for your planning schedule
Shibboleth IdP V2 End of Life
Shibboleth has announced that as of July 31, 2016, all security maintenance for the Shibboleth Identity Provider V2 release will cease. A complete schedule of the dates can be found on the Shibboleth announcements page.
Upgrading to IdP Version 3
Shibboleth V3 was released in November 2014 and since its release the AAF have been reviewing and testing it in preparation to support the upgrade within the federation. The good news is that the AAF has developed an IdP Installer that will assist with this upgrade and also simplify the implementation of V3 for all IdP’s.
With the release of Shibboleth V3.2.0 due in October, we recommend that you schedule the upgrade of your production IdP to this version early to avoid running an unsupported version.
IdP Installer
To assist Identity Providers (IdPs) with setting up, configuring and upgrading their IdPs, in the coming months the AAF will release the IdP Installer (V3). The new installer will streamline general maintenance and upgrade work while providing IdPs with:
- ECP
- simplified branding options
- a streamlined upgrade path
- compliance with the federation rules
- upgrades to the latest version using existing IdP information.
More information about the Installer will be released in the coming months. If you would like to be an earlier adopter, the Alpha2 release is now available for IdP’s to use in the federation test environment. Go to the AAF Shibboleth IdP Installer guide to start installing.
Contact AAF Support if you would like to discuss your Shibboleth 3 upgrade or to provide feedback, comments and improvements for the IdP Installer support@aaf.edu.au
Please note: All of these planning activities are in preparation for the end of life of Shibboleth IdP V2 (July 31, 2016).
|
|
Changes to Federation Certificates
From now until the end of October, we will be confirming that all subscribers have reviewed and refreshed federation certificates (SHA1) to ensure they meet the current and future requirements of the Federation.
If your certificates in Test or Production require updating, AAF Support will be in contact to discuss how to move forward and refresh your certificates for the federation environment.
Federation Certificate Guidelines
In the near future the AAF will release our new Federation Certificate Guidelines in two parts. The first part will outline changes to certificates used between IdPs and SPs that are registered in the federation metadata.
The second part will outline the release of new metadata endpoints that all IdPs and SPs will be required to migrate to when they become available.
These changes will provide an enhanced federation environment, prepare IdPs and SPs for eduGAIN and enable a simpler transition to Shibboleth IdP V3.
|
|
|
Support
If you need any assistance or would like to discuss the details of your upgrade please contact us at support@aaf.edu.au
|
|
|
|
|
|
|
|
