- feide-updates - lister.unit.no

Feide IdP update on Thursday June 25th at 20:30
by Morten Knutsen 22 Jun '26

22 Jun '26

We will be updating the Feide IdP at idp.feide.no Thursday 25.06 at 20:30. The update will invalidate any existing sessions, meaning that users might need to reauthenticate. If you have any questions or concerns about this update, please contact us at kontakt(a)sikt.no and refer to change #539308. -- Thanks, Morten Knutsen Sikt / Feide

1 0

Feide scheduled maintenence June 20th 08:00-08:30
by Morten Knutsen 20 Jun '26

20 Jun '26

We will be performing maintenence at Saturday June 20th between 08:00 and 08:30. Due to a database upgrade, our login systems and APIs will be unavailable for about 10 minutes during this time. If you have any questions about this, please contact us at kontakt(a)sikt.no and refer to change #538078. -- Regards, Morten Knutsen Sikt / Feide

1 1

Feide IdP update on Monday June 8th at 20:30
by Morten Knutsen 08 Jun '26

08 Jun '26

We will be updating the Feide IdP at idp.feide.no Monday 08.06 at 20:30. The update will invalidate any existing sessions, meaning that users might need to reauthenticate. If you have any questions or concerns about this update, please contact us at kontakt(a)sikt.no and refer to change #534934. -- Thanks, Morten Knutsen Sikt / Feide

1 1

Scheduled maintenance for Feide infrastructure Saturday 28.02.26 at 13:00
by Morten Knutsen 28 Feb '26

28 Feb '26

We will be performing some infrastructure maintenance on Saturday 28.02.26 from 13:00 to 15:00 CET. The infrastructure hosts these services: * Login services at https://auth.dataporten.no and https://idp.feide.no * APIs at https://api.dataporten.no and https://groups-api.dataporten.no * API Gatekeeper services for third party data sources at https://*.dataporten-api.no We don't expect any downtime as a result of this work, though there might be shorter periods of instability. If you have any questions or concerns about this update, please contact us at kontakt(a)sikt.no and refer to change #516066. -- Morten Knutsen Sikt / Feide

1 1

Support for Internet Explorer to be dropped Friday 11th Oct 10:30
by Morten Knutsen 06 Nov '24

06 Nov '24

As described on our roadmap, Feide will drop support for the IE11 browser with an update to our login system this coming Friday at 10:30. The login system will no longer be usable by IE11 after this time. If you have any questions or concerns about this change, contact us at kontakt(a)sikt.no. -- Regards, Morten Knutsen Sikt / Feide

1 2

Feide IdP update Tuesday 20.02 at 19:30
by Morten Knutsen 22 Feb '24

22 Feb '24

We will be updating the Feide IdP at idp.feide.no Tuesday 20.02 at 19:30. The update includes will invalidate any existing sessions, meaning that users might need to reauthenticate. If you have any questions regarding this update, we can be reached at kontakt(a)sikt.no. Best Regards, Morten Knutsen Sikt / Feide

2 3

Migration of Feide SAML service Tuesday 16 January at 18:00
by Olav Morken 16 Jan '24

16 Jan '24

Hi, we are going to migrate the Feide SAML service to the same platform as our other services. We will perform this change Tuesday 16 January at 18:00. This change affects our SAML login service, running at idp.feide.no. When we make the change, existing sessions for users will be interrupted, so users will have to log in again. A few users will also receive the information screen about attribute transfer to services again after the migration. Other than this, the change will not have any user visible impact. As a result of this change, the IP addresses of idp.feide.no will change to the following IP addresses: * 13.48.34.249 * 13.49.91.81 * 13.49.105.9 * 2a05:d016:15b:5a06:1e46:c4a8:af23:9ff5 * 2a05:d016:15b:5a07:769e:3dc3:91e8:1746 * 2a05:d016:15b:5a08:119a:4e53:5a88:5785 If you have any firewalls that restrict outgoing connections, you may have to update them to allow connections to the new IP addresses. This change also removes support for an old TLS cipher: * TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 This cipher is used by some old versions of Safari. It is already disabled for services logging in using OpenID connect, so this change should not affect many users. The IP addresses that Feide uses to contact the LDAP servers at the organizations as part of the login process will change, but the new IP addresses are already in use for other parts of Feide. All organizations already allow access from the new IP addresses. The issuer of the certificate for idp.feide.no will change. The current certificate is issued by Sectigo, while the new certificate will be issued by Let's Encrypt. If you have any questions or concerns wrt. this change, please contact us at: kontakt(a)sikt.no Best regards, Olav Morken Sikt / Feide

1 1

Feide IdP update on Thursday March 23rd at 13:00
by Morten Knutsen 23 Mar '23

23 Mar '23

On Thursday the 23rd of March at 13:00 we will update the Feide login systems. Changes: * Code changes to support upcoming test of Ansattporten login * Code changes to support upcoming needs of LUMI/MyAccessID * Minor bugfixes and internal improvements If you have any questions or concerns about this update, please contact us at kontakt(a)sikt.no and refer to change #350896. -- Regards, Morten Knutsen Sikt / Feide

1 1

Scheduled maintenance for Feide infrastructure Monday 06.03.23 at 16:00
by Morten Knutsen 06 Mar '23

06 Mar '23

We will be performing some infrastructure maintenance on Monday 06.03.23 from 16:00 to 17:00. The infrastructure hosts these services: * OpenID Connect services at https://auth.dataporten.no * APIs at https://api.dataporten.no and https://groups-api.dataporten.no * API Gatekeeper services for third party data sources at https://*.dataporten-api.no We don't expect any outages as a result of this work, though there may be shorter periods of instability. If you have any questions about this work, please contact us at kontakt(a)sikt.no and refer to change #348195. Thanks, Morten Knutsen Sikt / Feide

1 1

Change to the OpenID Connect userinfo endpoint response Tuesday 14th 12:30 CET
by Morten Knutsen 14 Feb '23

14 Feb '23

On Tuesday the 14th at 12:30 CET we will be deploying a change adding a "aud" claim containing the client id to the response from the OpenID Connect userinfo endpoint. This should not impact any services. The change is made primarily to ease migration from the old, deprecated userinfo endpoint. Example userinfo response before the change: { "sub": "76a7a061-3c55-430d-8ee0-6f82ec42501f", "dataporten-userid_sec": [ "feide:andreas@uninett.no" ], "https://n.feide.no/claims/userid_sec": [ "feide:andreas@uninett.no" ], "https://n.feide.no/claims/eduPersonPrincipalName": "andreas(a)uninett.no", "name": "Andreas \u00c5kre Solberg", "email": "andreas.solberg(a)uninett.no", "email_verified": false, "picture": "https://api.dataporten.no/userinfo/v1/user/media/p:a3019954-902f-45a3-b4ee-…" } Example userinfo response after the change, containing an "aud" claim with the client id: { "aud": "5578630b-cb54-4da4-8f15-eedaa8ec46c5", "sub": "76a7a061-3c55-430d-8ee0-6f82ec42501f", "dataporten-userid_sec": [ "feide:andreas@uninett.no" ], "https://n.feide.no/claims/userid_sec": [ "feide:andreas@uninett.no" ], "https://n.feide.no/claims/eduPersonPrincipalName": "andreas(a)uninett.no", "name": "Andreas \u00c5kre Solberg", "email": "andreas.solberg(a)uninett.no", "email_verified": false, "picture": "https://api.dataporten.no/userinfo/v1/user/media/p:a3019954-902f-45a3-b4ee-…" } If you have any questions about this change, please contact kontakt(a)sikt.no and refer to change #346136. -- Regards, Morten Knutsen Sikt / Feide

1 1