...
This page lists entity metadata values that are well known as source of operational issues affecting SAML2 implementations in eduGAIN. The eduGAIN OT will take all the possible measures to limit the damages caused by the issue according to its severity, rejection of the feed included.
According to the severity of the issues, the eduGAIN OT may reject the feed containing the metadata. Whatever the action the eduGAIN OT will undertake, it will promptly contact the Identity Federation responsible for the feed and it will try to solve the issue without any service interruption if possible.whenever possible.
In the case a the rejection of the feed is unavoidable, the eduGAIN OT will support the Identity Federation to restore the feed as soon as possible. Please note that even in the case of rejection of the feed containing the offending values, the last available feed will still be valid and it will continue to be published as part of the eduGAIN metadata aggregate.
Known Metadata Operational Issues table
| Code | Upstream Conditions | Downstream | Code | Conditions | Know Operational Issues | Possible actionsActions |
|---|---|---|---|---|---|---|
| CR | an The upstream metadata feed fromof an identity federationeduGAIN member contains a CR (Carriage Return) as a literal character reference (" " or "
") . | An eduGAIN member picks up the eduGAIN metadata and | republish republishes it to | their its own parties leaving untouched the CR literal character reference. | (2016) Relying parties not able to validate the metadata. (2019-08-21) .NET based signature validation fails (ADFSToolkit and other Powershell aggregate handlers impacted) - signaled by InCommon member to ADFSToolkit team via ADFSToolkit issue tracker, escalated and resolved by InCommon support. (2020) .NET based signature validation fails (ADFSToolkit and other Powershell aggregate handlers not able to validate the metadata). |
|
Notes
2020-10-15 side note on Code CR from Chris Phillips:
...