Page History

...

The rules marked red are actually specification errors and should be upgraded to validator errors (to be discussed within the eduGAIN SG)

	Condition	Level

Global

	Significance	Reason
1	Signing certificate expired	1-global	1	Currently implemented as a validator warning. To be confirmed by the SG.

Entity level

2	md:EmailAddress in md:ContactPerson element should start with mailto: prefix	2-entity	4	This violates line 495 of https://docs.oasis-open.org/security/saml/v2.0/saml-metadata-2.0-os.pdf and should be considered an error!
3	SIRTFI attribute present and security contact found but no http://refeds.org/metadata/contactType/security contactType	2-entity	2	SIRTFI specification error
4	SIRTFI attribute declared but no appropriate md:ContactPerson set	2-entity	2	SIRTFI specification error
5	shibmd:Scope with no regexp attribute	2-entity	5	https://wiki.shibboleth.net/confluence/display/SC/ShibMetaExt+V1.0 recommendation
6	mdattr:EntityAttributes placed in md:Extensions element of SPSSODescriptor/IDPSSODescriptor, expected in md:Extensions element of EntityDescriptor	2-entity	1	Since http://docs.oasis-open.org/security/saml/Post2.0/sstc-metadata-attr.html does not define appearance of this element in places other then md:Extensions element of EntityDescriptor it is most likely that the condition is a result of a mistake.
7	mdrpi:RegistrationPolicy not found	2-entity	3	eduGAIN SAML profile Section 3
8	mdattr:EntityAttributes element contains saml:AttributeValue with leading/trailing whitespaces

Entity’s role level

	2-entity	3
9	mdui:UIInfo

not

found

, no

but mdui:DisplayName

and mdui:Description

not present	3-role	3	eduGAIN SAML profile Section 3
10	mdui:UIInfo

with mdui:DisplayName

found but no mdui:

Description not present

Logo element	3-role	1	eduGAIN SAML profile Section 3
11	for SP: mdui:UIInfo not found

but

, no mdui:DisplayName

not present

and mdui:Description present	3-role	3	eduGAIN SAML profile Section 3
12	for SP: mdui:UIInfo

found but neither

with mdui:DisplayName

nor

found but mdui:Description not present	3-role	3	eduGAIN SAML profile Section 3
13	for SP: mdui:UIInfo found but

no mdui:Logo element

neither mdui:DisplayName nor mdui:Description present	3-role	3	eduGAIN SAML profile Section 3
14	this SP does not provide requested attribute specification	3-role	1	left from saml2int - should it be kept?
15	Data Protection Code of Conduct declared but no mdui:PrivacyStatementURL found	3-role	4	Violates the CoCo spec
16	CoCo declared but md:RequestedAttribute element not found	3-role	4	Violates the CoCo spec
17	CoCo declared but mdui:PrivacyStatementURL and md:RequestedAttribute elements not found	3-role	4	Violates the CoCo spec

Page tree