UPDATE ......From Tuesday 8 April 2025 we will change the way that Single Sign-on will work on our Confluence (wiki.geant.org) Please see here for more information:
Update
An alarm is raised when:
- a federation metadata feed does not validate correctly or is not available and cached copy of this federation feed is still valid
- a federation metadata feed is close to expiry time - the detailed description how this condition is handled is provided below
- a federation metadata feed does not validate correctly or is not available and cached copy of this federation feed expired.
An alarm message is delivered to the Operational Team and the federation contact email registered with the eduGAIN database.
In the case of metadata unavailability the first occurrence of this problem is reported only to the Operational Team. If the same problem persists in the next aggregation run an alarm is delivered to the Operational Team and the federation contact email registered with the eduGAIN database.
In the case of remaining validity period below 48 hours a message is also send to registered delegate / deputy emails.
An error status is set on the eduGAIN status page https://technical.edugain.org/status and the cause of the error is displayed in the details section. The remaining cache time is also displayed. The status is also available through the eduGAIN access API, as described on: https://technical.edugain.org/monitoring.
On https://technical.edugain.org/issues federations with potential issues are presented.
If the error condition persists reminder notifications are sent to the Operational Team and the federation contact email in the intervals of 6 hours. If the federation metadata feed can be accessed/validated again, a recovery message is delivered to the eduGAIN OT and the federation contact email.
During every aggregation run the validUntil timer for each of the federation metadata feeds is checked.
- If the remaining validity period is between 96 and 48 hours an alert is raised every 6 hour and notification is sent to the Operational Team and the federation contact email.
- If the remaining validity period is between 48 and 12 hours an alert is raised every 6 hour and notification is sent to the Operational Team, the federation contact email and delegate / deputy emails.
- If the remaining validity period is between 12 and 6 hours an alert is raised every second hour and notification is sent to the Operational Team, the federation contact email and delegate / deputy emails.
- If the remaining validity period is below 6 hours an alert is raised every hour and notification is sent to the Operational Team, the federation contact email and delegate / deputy emails.
When the remaining validity is between 96 and 48 hours any sent notification has subject:
„[MDS] federation_code_in_eduGAIN_database (country) metadata expiry in ... hours”, e.g.
[MDS] PIONIER-ID (PL) metadata expiry in ... hours”
For an alert on validity below 48 hours notification subject is:
„[MDS] URGENT federation_code_in_eduGAIN_database (country) is going to be removed from eduGAIN soon - metadata expiry in …. hours”
The following emails are possible:
| Subject | Content | Description | |
|---|---|---|---|
| 1. | [MDS] federation_code_in_eduGAIN_database (country) metadata expiry in ... hours | The case involves: federation_name, country MDS has found a problem with your metadata. Your metadata is going to expire in ... if a valid metadata feed will not be available before the expiration, you will be removed from eduGAIN. Please regenerate your feed. Verification timestamp: ... You can contact eduGAIN Operations at edugain-ot@lists.geant.org -- eduGAIN OT This message has been generated automatically | Mail sent when the federation feed is 96-48 hours before expiry |
| 2. | [MDS] URGENT federation_code_in_eduGAIN_database (country) is going to be removed from eduGAIN soon - metadata expiry in ... hours | The case involves: federation_name, country MDS has found a problem with your metadata. Your metadata is going to expire in ..., if a valid metadata feed will not be available before the expiration, you will be removed from eduGAIN. Please regenerate your feed. Verification timestamp: ... You can contact eduGAIN Operations at edugain-ot@lists.geant.org -- eduGAIN OT This message has been generated automatically | Mail sent when the federation feed is going to expire in less than 48 hours |
| 3. | [MDS] URGENT federation_code_in_eduGAIN_database (country) has been removed from eduGAIN
| The case involves: federation_name, country problem description (from the eduGAIN validator) For more details check: https://technical.edugain.org/validator?edugain=code Your metadata feed has been rejected. Your federation has been removed from eduGAIN and it cannot be readmitted until you fix the reported issue. Verification timestamp: ... You can contact eduGAIN Operations at edugain-ot@lists.geant.org -- eduGAIN OT This message has been generated automatically
| Mail sent when the federation feed is broken and cached copy expired |
| 4. | [MDS] federation_code_in_eduGAIN (country) - Metadata aggregation problem | The case involves: federation_name, country problem description (from the eduGAIN validator) Your metadata feed has been rejected, we are still using a cached copy which is valid until validUntil of the cached copy (x days)). You can contact eduGAIN Operations at edugain-ot@lists.geant.org -- | Mail sent when the metadata feed does not validate correctly |
| 5. | [MDS] federation_code_in_eduGAIN (country) - metadata feed fetching | The case involves: federation_name, country Your metadata feed is unavailable. We are still using a cached copy which is valid until validUntil of the cached copy (x days)). Verification timestamp: ... You can contact eduGAIN Operations at edugain-ot@lists.geant.org -- eduGAIN OT This message has been generated automatically | Mail sent when the metadata feed is not available |
| 6. | [MDS] federation_code_in_eduGAIN (country) - metadata feed fetching | The case involves: federation_name, country Your metadata feed is unavailable. Your federation has been removed from eduGAIN and it cannot be readmitted until you fix the reported issue. Verification timestamp: ... You can contact eduGAIN Operations at edugain-ot@lists.geant.org -- eduGAIN OT This message has been generated automatically
| Mail sent when the metadata feed is not available and cached copy of this federation feed expired |
| 7. | [MDS] federation_code_in_eduGAIN (country) - Feed recovery | This message has been generated automatically. The case involves: federation_name, country Your feed was accepted | Mail sent after the metadata feed recovery |