!!! ALERT - THIS SERVICE IS UNDER TESTING !!!
Index
- eduGAIN Connectivity Check 2148092135
- Check performed on the IdPs
- Statuses and results
- Common reasons for check failure
- eduGAIN Connectivity Check 2148092135
- Disable Checks
- User interface
- User interface parameters
- JSON interface
- GIT repository
- eduGAIN Connectivity Check 2148092135
Introduction
The purpose of the eduGAIN Connectivity Check 2 is to identify eduGAIN Identity Providers (IdP) that are not properly configured. In particular it checks if an IdP properly loads and consumes SAML2 metadata which contains the eduGAIN Service Providers (SP). The check results are published on the public eduGAIN Connectivity Check 2 web page (https://technical-test.edugain.org/eccs2/). The main purpose is to increase the service overall quality and user experience of the eduGAIN interfederation service by making federation and Identity Provider operators aware of configuration problems.
...
| Status | UI Color | Description and results |
|---|
| ERROR | Red | - The IdP's response contains an HTTP Error or the web page returned does not look like a login page. The most probable causes for this error are HTTP errors (e.g.: 404 error)
- Invalid-Form: considers those IdPs that do not load a standard username/password login page and do not return messages like "No return endpoint available for relying party" or "No metadata found for relying party".
- Timeout: considers those IdPs that do not load a standard username/password login page within 60 seconds.
- Connection-Error: considers those IdPs that are not reachable due to a connection problem.
- The IdP most likely does not consume the eduGAIN metadata correctly.
A typical case that falls into this category is when an IdP returns a message "No return endpoint available for relying party" or "No metadata found for relying party": - The IdP has a problem with its SSL certificate:
|
| OK | Green | - The IdP most likely correctly consumes eduGAIN metadata and returns a valid login page. This is no guarantee that login on this IdP works for all eduGAIN services but if the check is passed for an IdP, this is probable.
|
| DISABLED | White | - The IdP is excluded because it cannot be checked reliably. The "Page Source" column, when an entity is disabled, shows the reason for the disabling.
|
...
