<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.EmailStyle18
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:#1F497D;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:2107533027;
mso-list-type:hybrid;
mso-list-template-ids:-344927056 67698705 67698713 67698715 67698703 67698713 67698715 67698703 67698713 67698715;}
@list l0:level1
{mso-level-text:"%1\)";
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level2
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level3
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l0:level4
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level5
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level6
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l0:level7
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level8
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level9
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><span style="color:#1F497D">Reminder to be testing the Shibboleth v3 upgrade. . Testing should be conducted as soon as possible. Please remember to communicate to the list once you have tested..
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Thanks to those who have been testing. See details below. WE would like to get as much done as soon as possible. Deadline is coming in a few days..
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:12.0pt">The testing period will commence Friday, January 29, 2016, and continue
<span style="color:red">through February 18, 2016. <o:p></o:p></span></span></b></p>
<p class="MsoNormal"><b><span style="font-size:12.0pt;color:red"><o:p> </o:p></span></b></p>
<p class="MsoNormal"><span style="font-size:12.0pt">Thank you<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt">UF IT </span><o:p></o:p></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From:</b> Snowden,Jennifer S <br>
<b>Sent:</b> Friday, January 29, 2016 11:44 AM<br>
<b>To:</b> <a href="mailto:it-directors-l@lists.ufl.edu">it-directors-l@lists.ufl.edu</a><br>
<b>Subject:</b> Please test the final version of the Shibboleth Version 3.21 upgrade
<o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><b><span style="font-size:12.0pt;color:red">Important message for those who manage and operate services using Shibboleth to authenticate and authorize access to your applications at UF.</span></b><b><span style="font-size:12.0pt"> <o:p></o:p></span></b></p>
<p class="MsoNormal"><b><span style="font-size:12.0pt"><o:p> </o:p></span></b></p>
<p class="MsoNormal"><b><span style="font-size:12.0pt">See details below:<span style="color:#1F497D">
</span><o:p></o:p></span></b></p>
<p class="MsoNormal"><b><span style="font-size:12.0pt"><o:p> </o:p></span></b></p>
<p class="MsoNormal"><span style="font-size:12.0pt">As announced during the fall term, the Shibboleth IdP is being upgraded to a new major release – 3.21 .
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt">Although many SPs tested successfully last month (December 2015), we uncovered issues for a few of the high use software applications that use the Force Authentication feature. This issue has been successfully
remediated, and we have since run another successful load test. We will need to start another cycle of testing SPs campuswide due to changes in the IdP configuration.
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt">UFIT and UF now need the assistance of the entire Shibboleth community to validate their services with the new release. The technical community and management of those staff in this UF wide group should review
services both on and off campus with the upgraded software. <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:12.0pt">The testing period will commence Friday, January 29, 2016, and continue through February 18, 2016</span></b><span style="font-size:12.0pt">. We are scheduled to install to production on
<b>Sunday, February 28, 2016.</b> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:12.0pt">We urge you to test thoroughly and provide feedback to the Shibboleth listserv with both positive results and issues. <o:p></o:p></span></b></p>
<p class="MsoNormal"><b><span style="font-size:12.0pt"><o:p> </o:p></span></b></p>
<p class="MsoNormal"><b><u><span style="font-size:12.0pt">Steps for testing the new version:
<o:p></o:p></span></u></b></p>
<p class="MsoNormal"><u><span style="font-size:12.0pt"><o:p><span style="text-decoration:none"> </span></o:p></span></u></p>
<p class="MsoNormal"><span style="font-size:12.0pt">Test using the IdP at <a href="https://qat.login.ufl.edu">
https://qat.login.ufl.edu</a>. Please test services that allow you to assess your comfort with moving to the new version into production. User acceptance testing should be completed no later than
<b>Thursday, February 18, 2016</b>.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt">You should alter the Services that you want to test to point to the user acceptance server. Please note this is a test server.
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal" style="margin-left:.5in;text-indent:-.25in;mso-list:l0 level1 lfo2">
<![if !supportLists]><span style="font-size:12.0pt"><span style="mso-list:Ignore">1)<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]><span style="font-size:12.0pt">The server has all current GatorLink Credentials available to it.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal" style="margin-left:.5in;text-indent:-.25in;mso-list:l0 level1 lfo2">
<![if !supportLists]><span style="font-size:12.0pt"><span style="mso-list:Ignore">2)<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]><span style="font-size:12.0pt">The server is using a "TEST" copy of security ARP attributes (refreshed from production this week), so some data may not be equal to production as time moves forward.
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal" style="margin-left:.5in;text-indent:-.25in;mso-list:l0 level1 lfo2">
<![if !supportLists]><span style="font-size:12.0pt"><span style="mso-list:Ignore">3)<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]><span style="font-size:12.0pt">The changes on the SP are basically changing everywhere it says "login.ufl.edu" to "qat.login.ufl.edu." Make sure your SP has the updated metadata for the QAT IdP.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal" style="margin-left:.5in;text-indent:-.25in;mso-list:l0 level1 lfo2">
<![if !supportLists]><span style="font-size:12.0pt"><span style="mso-list:Ignore">4)<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]><span style="font-size:12.0pt">Once you are ready to test your application we suggest:
<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in;text-indent:-.25in;mso-list:l0 level2 lfo2">
<![if !supportLists]><span style="font-size:12.0pt"><span style="mso-list:Ignore">a.<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]><span style="font-size:12.0pt">Test that it logs in as expected with appropriate attributes if it is the first SP (service) to login to a new browser.
<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in;text-indent:-.25in;mso-list:l0 level2 lfo2">
<![if !supportLists]><span style="font-size:12.0pt"><span style="mso-list:Ignore">b.<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]><span style="font-size:12.0pt">Test that it logs in as expected with appropriate attributes if it is the 2<sup>nd</sup> or later first SP (service) to login to a browser session.
<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in;text-indent:-.25in;mso-list:l0 level2 lfo2">
<![if !supportLists]><span style="font-size:12.0pt"><span style="mso-list:Ignore">c.<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]><span style="font-size:12.0pt">Test additionally as you feel needed to confirm your service.
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt">This will hopefully make your testing relatively straight forward and efficient.<span style="color:#1F497D">
</span><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt">Feedback regarding testing results should be provided to UFIT and campus using the shibboleth listserv (<a href="mailto:shibboleth-l@lists.ufl.edu">shibboleth-l@lists.ufl.edu</a>).<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:.5in"><span style="font-size:12.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:12.0pt">Please report successes and issues.</span></b><span style="font-size:12.0pt"> We can help each other as a community. We will work on remediation of any issues as soon as we know about them.
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt">Please send any questions to Warren Curry (<a href="mailto:whcurry@ufl.edu">whcurry@ufl.edu</a>) or Tina Velez (<a href="mailto:kvelez@ufl.edu">kvelez@ufl.edu</a>).
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt">For technical assistance:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt">-Create a ticket in <a href="https://my.it.ufl.edu">
https://my.it.ufl.edu</a> for the IAM team by using <b>Tier 3 Admin Services / UFIT IAM System Component Tier3</b> .
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt">-email <a href="mailto:UFIT-IAM-L@lists.ufl.edu">
UFIT-IAM-L@lists.ufl.edu</a><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt">Thank You for your effort <o:p>
</o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt">UFIT<o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="color:#1F497D"><img border="0" width="199" height="56" id="Picture_x0020_1" src="cid:image001.png@01D15A8A.52C93600" alt="Description: Description: cid:image001.png@01CE35CF.4A5B4180"></span><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>