Page History

• The IdP's response contains an error or the web page is not returned due to a Timeout, Connection or IdP Generic error.
  
  • Timeout: considers those IdPs that do not load a standard username/password login page within 60 seconds.
  • Connection-Error: considers those IdPs that are not reachable due to a connection problem. View the Page Source content to discover which problem has the IdP.
  • IdP-Generic-Error: considers those IdPs that the returned web page does not contain a Login Form, but an unspecified error such as "An error occurred". This kind of error has been seen on Microsoft ADFS based IdPs.
  • 403-Forbidden: considers those IdPs that return 403 Forbidden errorstatus code while opening their login page through a testing SP.
• The IdP most likely does not consume the eduGAIN metadata correctly.
  
  • No-SP-Metadata-Error: considers those IdPs that return a message like "No return endpoint available for relying party" or "No metadata found for relying party" instead of the Login Page.
• The HTTP SSL certificate used by the IdP is invalid (see below for further explanation):
  
  • SSL-Error

The IdP most likely correctly consumes eduGAIN metadata and returns a valid login page. This is no guarantee that login on this IdP works for all eduGAIN services but if the check is passed for an IdP, this is probable.

• OK

The IdP can't be checked because the returned Login Page content is not recognized or the Login Page is always returned, also for the fake SP.

• Unable-To-Check: considers those IdPs that do not load a standard username/password login page and do not return messages like "No return endpoint available for relying party" or "No metadata found for relying party".

The IdP is excluded because it cannot be checked reliably. The Page Source column, when an entity is disabled, is populated with the reason for the disabling.

• DISABLED: considers those IdPs that are disabled from the check by an eduGAIN Operation Team member or "robots.txt" file.