IMPORTANT REMINDER - Shib V3 testing of your application DEADLINE is Thursday , February, 18.

[Curry, Warren]

Important message for those who manage and operate services using Shibboleth to authenticate and authorize access to your applications at UF.

Please test the final version of the Shibboleth Version 3.21 upgrade.   Many Thanks for those of you who have tested your  Service provider applications.

As of this time we are aware of only one issue and that is being addressed with an outside vendor.

Please report successes and issues.  We can help each other as a community.  We will work on remediation of any issues as soon as we know about them.

A final GO decision will be made following Thursday end of testing deadline.  Production deployment is scheduled for Sunday, Febraury 28th, 6am...

Please send any questions to Warren Curry (whcurry at ufl.edu<mailto:whcurry at ufl.edu>) or  UFIT-IAM-L at lists.ufl.edu<mailto:UFIT-IAM-L at lists.ufl.edu>.

For technical assistance:

-Create a ticket in https://my.it.ufl.edu for the IAM team by using Tier 3 Admin Services / UFIT IAM System Component Tier3 .
-email UFIT-IAM-L at lists.ufl.edu<mailto:UFIT-IAM-L at lists.ufl.edu>


Thank You for your effort

UFIT

[Description: Description: cid:image001.png at 01CE35CF.4A5B4180]



From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Curry, Warren
Sent: Monday, February 08, 2016 10:27 AM
To: Shib Users <users at shibboleth.net>; IT DISCUSSION <IT-DISCUSSION-L at LISTS.UFL.EDU>
Subject: IMPORTANT REMINDER - Please test the final version of the Shibboleth Version 3.21 upgrade

Reminder to be testing the Shibboleth v3 upgrade.  .  Testing should be conducted as soon as possible.    Please remember to communicate to the list once you have tested..

Thanks to those who have been testing.   See details below.  WE would like to get as much done as soon as possible.    Deadline is coming in a few days..

The testing period will commence Friday,  January 29, 2016, and continue through February 18, 2016.

Thank you

UF IT




From: Snowden,Jennifer S
Sent: Friday, January 29, 2016 11:44 AM
To: it-directors-l at lists.ufl.edu<mailto:it-directors-l at lists.ufl.edu>
Subject: Please test the final version of the Shibboleth Version 3.21 upgrade


See details below:

As announced during the fall term, the Shibboleth IdP is being upgraded to a new major release - 3.21 .

Although many SPs tested successfully last month (December 2015), we uncovered issues for a few of the high use software applications that use the Force Authentication feature.  This issue has been successfully remediated, and we have since run another successful load test.  We will need to start another cycle of testing SPs campuswide due to changes in the IdP configuration.

UFIT and UF now need the assistance of the entire Shibboleth community to validate their services with the new release.  The technical community and management of those staff in this UF wide group should review services both on and off campus with the upgraded software.

The testing period will commence Friday,  January 29, 2016, and continue through February 18, 2016.  We are scheduled to install to production on Sunday, February 28, 2016.

We urge you to test thoroughly and provide feedback to the Shibboleth listserv with both positive results and issues.

Steps for testing the new version:

Test using the IdP at https://qat.login.ufl.edu.  Please test services that allow you to assess your comfort with moving to the new version into production.   User acceptance testing should be completed no later than Thursday, February 18, 2016.

You should alter the Services that you want to test to point to the user acceptance server.  Please note this is a test server.

1)      The server has all current GatorLink Credentials available to it.

2)      The server is using a "TEST" copy of security ARP attributes (refreshed from production this week), so some data may not be equal to production as time moves forward.

3)      The changes on the SP are basically changing everywhere it says "login.ufl.edu" to "qat.login.ufl.edu." Make sure your SP has the updated metadata for the QAT IdP.

4)      Once you are ready to test your application we suggest:
a.      Test that it logs in as expected with appropriate attributes if it is the first SP (service) to login to a new browser.
b.      Test that it logs in as expected with appropriate attributes if it is the 2nd or later first SP (service)  to login to a browser session.
c.       Test additionally as you feel needed to confirm your service.

This will hopefully make your testing relatively straight forward and efficient.

Feedback regarding testing results should be provided to UFIT and campus using the shibboleth listserv (shibboleth-l at lists.ufl.edu<mailto:shibboleth-l at lists.ufl.edu>).

Please report successes and issues.  We can help each other as a community.  We will work on remediation of any issues as soon as we know about them.

Please send any questions to Warren Curry (whcurry at ufl.edu<mailto:whcurry at ufl.edu>) or Tina Velez (kvelez at ufl.edu<mailto:kvelez at ufl.edu>).

For technical assistance:

-Create a ticket in https://my.it.ufl.edu for the IAM team by using Tier 3 Admin Services / UFIT IAM System Component Tier3 .
-email UFIT-IAM-L at lists.ufl.edu<mailto:UFIT-IAM-L at lists.ufl.edu>


Thank You for your effort

UFIT

[Description: Description: cid:image001.png at 01CE35CF.4A5B4180]


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160215/33f29704/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 14550 bytes
Desc: image001.png
URL: <http://shibboleth.net/pipermail/users/attachments/20160215/33f29704/attachment-0001.png>