Monitoring

[Paul Caskey]

Metadata reload information is listed on the IdP's status page by source.

Make sure to use the correct status URL: "/idp/status"

The status page will list your metadata sources, similar to this:


service: shibboleth.MetadataResolverService
last successful reload attempt: 2021-01-25T18:35:24.864374Z
last reload attempt: 2021-01-25T18:35:24.864374Z

        metadata source: IdPShibbolethMetadata
        last refresh attempt: 2021-02-07T12:35:26.043605Z
        last successful refresh: 2021-02-07T12:35:26.043605Z
        last update: 2021-01-25T18:35:26.023515Z

        metadata source: AnotherSP
        last refresh attempt: 2021-02-07T12:35:25.624137Z
        last successful refresh: 2021-02-07T12:35:25.624137Z
        last update: 2021-01-25T18:35:25.571828Z




From: users <users-bounces at shibboleth.net> On Behalf Of Woerle.Andreas at swisscom.com
Sent: Sunday, February 7, 2021 5:22 AM
To: users at shibboleth.net
Subject: Monitoring


Hi Everyone,



We want to monitor that our shibboleth instance was successfully able to import metadata for all (or individual) idps.



Is there a way to achieve this using the status handler https://wiki.shibboleth.net/confluence/display/SP3/Status+Handler or by any other means?



Could the target-parameter be of help? We tried adding the idp's uri as "target" (/Status?target=https://idp.our-host.com/auth/realms/our-realm/protocol/saml/descriptor) and it returned "<Status><OK/></Status>", however it does the same when passing for instance "http://example.com" as the target resource.



Any help would be much appreciated!


Andreas

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20210207/241281fb/attachment.htm>