Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  • checks that the elements asserting compliance to the Data protection Code of Conduct conform to the SAML2 metadata profile for the Data protection Code of Conduct
  • checks that the Privacy Policy referenced by mdui:PrivacyStatementURL resolves to a page which references the Data Protection Code of Conduct
  • archives the SP's Privacy Policy page for the audit trail
  • the ip address of the CoCo monitoring tool is 161.53.2.204
  • value of the User-Agent request header sent by CoCo monitoring tool is "eduGAIN CoCo Monitor v1.0"

On-line interface:

The tool has an on-line interface in http://monitor.edugain.org/coco/

The tool uses following colours for SPs

Colourid_statuscode
Decription
Description
White1
The SP does not assert compliance to the Data Protection Code of Conduct
Green2
The SP conforms to the REQUIRED and RECOMMENDED behavior described in the SAML2 metadata profile for the Data protection Code of Conduct
Yellow3
The SP conforms to the REQUIRED behavior described in the SAML2 metadata profile for the Data protection Code of Conduct
Red4<> -1The SP does not conform to the REQUIRED behavior described in the SAML2 metadata profile for the Data protection Code of Conduct
Gray4-1The SP can not be checked properly (Unable to access Privacy Policy URL)

For description of the columns, see below.

...

The monitoring tool provides also a JSON feed on the monitoring results in http://monitor.edugain.org/coco/json.php

Currently If called without parameters feed shows only "green" and "yellow" entities (entities with id_status=2 ) are in the feed.or id_status=3).

All entities can be fetched using query string parameter all_sps=true. Example: http://monitor.edugain.org/coco/json.php?all_sps=true

Specific entity can be fetched using query string parameter entityid=<URLENCODED_ENTITYID>. Example: http://monitor.edugain.org/coco/json.php?entityid=https%3A%2F%2Fwiki.edugain.org%2Fshibboleth

The table below describes the JSON feed. You can request particular attributes by enumerating their names in the query string. Example: http://monitor.edugain.org/coco/json.php?attributes=DisplayName;entityID

Attribute name (JSON)Attribute description
entityIDSP's SAML2 entityID
registrationAuthority

mdrpi:RegistrationInfo element’s registrationAuthority attribute

DisplayNamemdui:displayName element. If multivalued, only the value with xml:lang="en" is present
first_seenTimestamp when the monitoring tool has first encountered this SP
last_seenTimestamp when the monitoring tool has last encountered this SP
id_statusObserved colour of the SP; see the table above
statusTextual representation of the id_status attribute
PrivacyStatementURLmdui:PrivacyStatementURL element. If multivalued, only the value with xml:lang="en" is present
code(HTTP) status code when when fetching the page to which mdui:PrivacyStatementURL resolves;
codes less then 0 represent errors in page access
code_txtHTTP status code description / error code description
content_typeThe content type of the page to which mdui:PrivacyStatementURL resolves
headersHeaders of the page to which mdui:PrivacyStatementURL resolves
cookiesCookies of the page to which mdui:PrivacyStatementURL resolves
source_b64A copy of the last archived page to which mdui:PrivacyStatementURL resolves (BASE64 encoded)

...