Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  • checks that the elements asserting compliance to the Data protection Code of Conduct conform to the SAML2 metadata profile for the Data protection Code of Conduct
  • checks that the Privacy Policy referenced by mdui:PrivacyStatementURL resolves to a page which references the Data Protection Code of Conduct
  • archives the SP's Privacy Policy page for the audit trail

On-line interface

The tool has an on-line interface in http://monitor.edugain.org/coco/

The tool uses following colours for SPs

Colourid_status codeDecription
White1The SP does not assert compliance to the Data Protection Code of Conduct
Green2The SP conforms to the REQUIRED and RECOMMENDED behavior described in the SAML2 metadata profile for the Data protection Code of Conduct
Yellow3The SP conforms to the REQUIRED behavior described in the SAML2 metadata profile for the Data protection Code of Conduct
Red4The SP does not conform to the REQUIRED behavior described in the SAML2 metadata profile for the Data protection Code of Conduct

For description of the columns, see below.

JSON interface

The monitoring tool provides also a JSON feed on the monitoring results in http://monitor.edugain.org/coco/json.php

...

The table below describes the JSON feed. You can request particular attributes by enumerating their names in the query string. Example: http://monitor.edugain.org/coco/json.php?attributes=DisplayName;entityID

Attribute name (JSON)Attribute description
entityIDSP's SAML2 entityID
registrationAuthority

mdrpi:RegistrationInfo element’s registrationAuthority attribute

DisplayNamemdui:displayName element. If multivalued, only the value with xml:lang="en" is present
first_seenTimestamp when the monitoring tool has first encountered this SP
last_seenTimestamp when the monitoring tool has last encountered this SP
id_statusObserved colour of the SP; see the table above
statusTextual representation of the id_status attribute
PrivacyStatementURLmdui:PrivacyStatementURL element. If multivalued, only the value with xml:lang="en" is present
codeHTTP status code when when fetching the page to which mdui:PrivacyStatementURL resolves
code_txtHTTP status code description
content_typeThe content type of the page to which mdui:PrivacyStatementURL resolves
headersHeaders of the page to which mdui:PrivacyStatementURL resolves
cookiesCookies of the page to which mdui:PrivacyStatementURL resolves
source_b64A copy of the last archived page to which mdui:PrivacyStatementURL resolves (BASE64 encoded)

Custom SAML2 metadata file validation

You can also validate a custom SAML2 metadata file's compliance to the Data Protection Code of Conduct

...