<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body style="overflow-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;">This really is InCommon Participants stuff, but you want to see the mail thread on this list that started yesterday. Bottom line, for an unknown reason InCommon changed the validUntil date to 3 weeks out instead of the always 2 weeks out (for years), and your IdP or SP is rejecting the InCommon metadata. You need to change the validUntil period to 21 days for now. <div><br></div><div>And if you are still using the old aggregate endpoint, that stops working -- and that has been announced multiple times -- on Feb. 25.</div><div><br></div><div><span style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);">You should switch to MDQ. But note the aggregate is not (yet) going away. Only the original location for it is going away. The following URL will continue to deliver an aggregate, but with the MDQ signing cert used, not the original one for the original aggregate location.</span><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);"><br></div><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);"> <a href="https://mdq.incommon.org/entities">https://mdq.incommon.org/entities</a></div><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);"><br></div><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);">As documented here:</div><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);"><br></div><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);"> <a href="https://spaces.at.internet2.edu/display/MDQ/how-to-locate-metadata-with-mdq">https://spaces.at.internet2.edu/display/MDQ/how-to-locate-metadata-with-mdq</a></div><div><br><blockquote type="cite"><div>On Feb 18, 2025, at 10:07 AM, Rodriguez, Eric via users <users@shibboleth.net> wrote:</div><br class="Apple-interchange-newline"><div><meta charset="UTF-8"><div class="WordSection1" style="page: WordSection1; caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 20px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><div style="margin: 0in; font-size: 11pt; font-family: Aptos;"><span style="font-family: Calibri, sans-serif;">IDP version is 4.3.1<o:p></o:p></span></div><div style="margin: 0in; font-size: 11pt; font-family: Aptos;"><span style="font-family: Calibri, sans-serif;">We’re experiencing the same thing at Longwood University, but somewhat different. Our metadata has not automatically updated since 12:16PM yesterday, and it expired after 8PM last night.<o:p></o:p></span></div><div style="margin: 0in; font-size: 11pt; font-family: Aptos;"><span style="font-family: Calibri, sans-serif;"><o:p> </o:p></span></div><div style="margin: 0in; font-size: 11pt; font-family: Aptos;"><span style="font-family: Calibri, sans-serif;">Also, it seems that<span class="Apple-converted-space"> </span><a href="http://shibboleth.net/ns/profiles/saml2/sso/browser" style="color: rgb(70, 120, 134); text-decoration: underline;">http://shibboleth.net/ns/profiles/saml2/sso/browser</a><span class="Apple-converted-space"> </span>is unavailable for RP configurations. May be unrelated to the InCommon issue.<o:p></o:p></span></div><div style="margin: 0in; font-size: 11pt; font-family: Aptos;"><span style="font-family: Calibri, sans-serif;"><o:p> </o:p></span></div><div><div style="margin: 0in; font-size: 11pt; font-family: Aptos; line-height: 16pt;"><b><span style="font-size: 10pt; font-family: Verdana, sans-serif; color: rgb(46, 116, 181);">Eric Rodriguez<o:p></o:p></span></b></div><div style="margin: 0in; font-size: 11pt; font-family: Aptos; line-height: 13pt;"><span style="font-size: 10pt; font-family: Verdana, sans-serif; color: rgb(46, 116, 181);">Senior Computer Systems Engineer<o:p></o:p></span></div><div style="margin: 0in; font-size: 11pt; font-family: Aptos; line-height: 13pt;"><span style="font-size: 10pt; font-family: Verdana, sans-serif; color: rgb(46, 116, 181);">Longwood University<o:p></o:p></span></div></div><div style="margin: 0in; font-size: 11pt; font-family: Aptos;"><span style="font-family: Calibri, sans-serif;"><o:p> </o:p></span></div><div><div style="border-width: 1pt medium medium; border-style: solid none none; border-color: rgb(225, 225, 225) currentcolor currentcolor; border-image: none; padding: 3pt 0in 0in;"><div style="margin: 0in; font-size: 11pt; font-family: Aptos;"><b><span style="font-family: Calibri, sans-serif;">From:</span></b><span style="font-family: Calibri, sans-serif;"><span class="Apple-converted-space"> </span>users <<a href="mailto:users-bounces@shibboleth.net" style="color: rgb(70, 120, 134); text-decoration: underline;">users-bounces@shibboleth.net</a>><span class="Apple-converted-space"> </span><b>On Behalf Of<span class="Apple-converted-space"> </span></b>Ramaiah, Vanna G. via users<br><b>Sent:</b><span class="Apple-converted-space"> </span>Tuesday, February 18, 2025 11:01 AM<br><b>To:</b><span class="Apple-converted-space"> </span><a href="mailto:users@shibboleth.net" style="color: rgb(70, 120, 134); text-decoration: underline;">users@shibboleth.net</a><br><b>Cc:</b><span class="Apple-converted-space"> </span>Ramaiah, Vanna G. <<a href="mailto:ramaiah@musc.edu" style="color: rgb(70, 120, 134); text-decoration: underline;">ramaiah@musc.edu</a>><br><b>Subject:</b><span class="Apple-converted-space"> </span>Error with SPs registered with InCommon<o:p></o:p></span></div></div></div><div style="margin: 0in; font-size: 11pt; font-family: Aptos;"><o:p> </o:p></div><p><span style="font-size: 10.5pt; color: red; background: rgb(255, 204, 153);">CAUTION: This is an EXTERNAL email. Do not click links or open attachments unless you recognize the sender and know the content is safe.</span><o:p></o:p></p><div style="margin: 0in; font-size: 11pt; font-family: Aptos;">IDP version is 4.3.3.<o:p></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Aptos;">Any service provider registered with incommon is unable to login.We are getting this error in the logs.<o:p></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Aptos;"><o:p> </o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Aptos;">InCommon: Metadata backing store contained an EntityDescriptor with the ID:<a href="https://federation.nih.gov/FederationGateway" target="_blank" title="https://federation.nih.gov/federationgateway" style="color: rgb(70, 120, 134); text-decoration: underline;">https://federation.nih.gov/FederationGateway</a>, but it was no longer valid<o:p></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Aptos;"><o:p> </o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Aptos;"><o:p> </o:p></div></div><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 20px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;">--<span class="Apple-converted-space"> </span></span><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 20px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 20px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;">For Consortium Member technical support, see https://shibboleth.atlassian.net/wiki/x/ZYEpPw</span><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 20px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 20px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;">To unsubscribe from this list send an email to users-unsubscribe@shibboleth.net</span></div></blockquote></div><br><div>
<div>--<br>Michael A. Grady<br>IAM Architect, Unicon, Inc.</div><div><br></div><br class="Apple-interchange-newline">
</div>
<br></div></body></html>