Putting this forum into a federation as an SP

[ChrisRohrer]

If it is an organisation from the UbuntuNet region, they are also welcome to join our regional federation unIDa. Or if they want to invest some more effort, they can setup their own (national) federation themselves using our Resource Registry https://rr.ubuntunet.net/.

While this makes sense from a geographical perspective, unIDa is unfortunately not yet part of eduGAIN. But seeing that GrIDP has been accepted recently, I will propose unIDa again. Last time I was told that we can't join as a regional entity, federations are supposed to be national.

Anyone interested in joining unIDa or setting up their own federation can contact me under eduid@ubuntunet.net.

Ps. @brucellino: How do I get the unIDa federation added as a login option to this forum?

[brucellino]

Hi @ChrisRohrer ! Just wanted to split off and talk about this topic :

Ps. @brucellino: How do I get the unIDa federation added as a login option to this forum?

Basically, we need to exchange metadata - we need to add uniDa as a federation in our providers on our DiscourseSSO config.

Where can we get the metadata of the federation ?

Also, btw - when I try to log into rr.ubuntnet.net, I get what seems to be a 500 (internal server error).

[ChrisRohrer]

Where can we get the metadata of the federation ?

https://rr.ubuntunet.net/metadata/federation/unida/metadata.xml

Also, btw - when I try to log into rr.ubuntnet.net, I get what seems to be a 500 (internal server error).

Federated login is not enabled, as we don't want to create a recursive loop here

[brucellino]

Federated login is not enabled,

ah - you might want to remove "log in with federated credentials" bit : https://rr.ubuntunet.net/auth/fedauth/120 on the login page.

Next thing :

Where can we get the metadata of the federation ?

https://rr.ubuntunet.net/metadata/federation/unida/metadata.xml

Sorry, I forgot that we needed the public key of the signing certificate. Can you attach it or send a link ?

[ChrisRohrer]

ah - you might want to remove "log in with federated credentials" bit : https://rr.ubuntunet.net/auth/fedauth/120 on the login page.

Or better even, I make it work.

Sorry, I forgot that we needed the public key of the signing certificate. Can you attach it or send a link ?

I don't sign the metadata under this link.

[brucellino]

Ok, so here is the procedure we have followed so far :

1. Put the new federation metadata where it's needed :
   1. On the GridP WAYF
   2. in the SP Shibboleth2 configuration
2. Put the SP Metadata where it's needed
   1. Add it to the uniDA federation as an SP in the Shibboleth2 configuration