Identity Provider 2012 Upgrade progress

This page reports the status of the upgrade as it happens, to document any known problems and their resolutions, etc. Checking this page before reporting a problem may help reduce duplicate reports.

While this page can be edited by many people, please avoid editing it unless you are part of the upgrade team - persistent problems accessing library electronic resources should be reported to the University Library at lib-raven@lists.cam.ac.uk; persistent problems accessing any other site should be reported to the UCS Service Desk at service-desk@ucs.cam.ac.uk. Administrators of sites using Raven to control access are welcome to contact raven-support@ucs.cam.ac.uk.

2012-06-19 12.28

Access to the Engineering Village Web site (https://evauth.engineeringvillage.com/shibboleth/login.html) is failing, apparently because of a mis-configuration at their end. I'll talk to their technical contact.

2012-06-19 12.20

I'm seeing a worrying number of log records implying that the new shib server is loosing track of who someone is between the various steps of an authentication request. I'm not sure how thios will manifest to a user, but it's unlikely to be good. I'm investigating - it may be related to timeouts and (perhaps) the time it takes someone to complete the TandC and attribute release pages.

2011-06-19 11.50

4 providers - https://sp.tshhosting.com/shibboleth (last seen 11:04, Thomson Scientific Inc: Thomson Reuters); https://sp.uk-plc.net/shibboleth (last seen 10:32, @UK PLC); https://shib.ingramdigital.com/shibboleth (last seen 07:21, MyiLibrary.com); https://zetoc.mimas.ac.uk/shibboleth (last seen 03:28, MIMAS Zetoc Service) - are sending authentication requests to the old servers but authentication requests to the new ones. This won't work. I'll drop a line to the UK federation technical contacts for each asking them to fix their metadata.

Two providers, at ewebproxy.westgroup.com (last seen 06:00:32) and d2-prod-gw.lexisnexis.com (last seen 11:23:04) are doing the reverse. There's not much I can do about this because I have no way to identify appropriate contacts.

2012-06-19 08.20

Status update: 31 providers have switched to using new servers, most apparently successfully. About 100 users have authenticated. Still a small number of errors being logged but with no obvious pattern - further investigation today.

2012-06-18 21.30

Status update: A number of providers (17) are apparently successfully sending requests to the new servers. There are however a number of failures being logged. These may - as expected - be the results of mismatched metadata within particular SPs (resulting in different parts of an authentication exchange being sent to the old and new servers with resulting chaos when the state established by an initial request can't be found on a subsequent one). Things should be clearer in the morning. Providers apparently working include

John Wiley & Sons Limited: Wiley Online Library; SAGE Journals Online; Thomson Scientific Inc: Thomson Reuters; Oxford Journals; EBSCO Publishing, Inc; Test SP on mnementh.csi; University Computing Service; EDINA: Digimap (live); Stanford University: Oxford Medicine; Project MUSE; University Computing Service; BMJ Journals; Justis Publishing; Royal Society Publishing Organization; IEEE XploreDigital Library; Georg Thieme Verlag KG: Thieme eJournals; UK Data Archive

2012-06-18 18.43

First apparently-successful authentication via new IdP, from http://shibboleth.ebscohost.com

2012-06-18 18.25

Connection from a test SP (https://mnementh.csi.cam.ac.uk/shibboleth) forcing use of the updated UK federation metadata works.

2012-06-18 17.18

Revised metadata published by the UK federation

2012-06-18 13.02

UK federation Help Desk confirm that the new metadata will be published 'on the signing/publishing run this evening'. Friday's new metadata was published at about 17:50.

2012-06-18 11.44

Request submitted (Call 005005) to UK federation Help Desk for our metadata in the federation metadata file to be updated.

2012-06-15 10.34

This page created