- feide-updates - lister.unit.no

[Feide Updates] Feide IdP update Wednesday 16 February at 12:00
by Morten Knutsen 09 Feb '22

09 Feb '22

We will update the Feide login service on Wednesday 16 February at 12:00 with the following changes: * Rework of organization selector/affiliation chooser to make it accessible * Support reauthentication when authenticated with external providers * Various other internal cleanups and fixes * Change 'Uninett' to 'Sikt' on user facing pages * Support more MFA methods in AzureAD auth flow * User attribute groups on the old innsyn page If you have any questions regarding this update, please contact kontakt(a)sikt.no Best Regards, Morten Knutsen Sikt

1 0

[Feide Updates] Upcoming change to Feide OpenID Connect infrastructure
by Jon Kåre Hellan 19 Jan '22

19 Jan '22

On Tuesday 18.1 at 10:00 we will be changing the underlying infrastructure for parts of the Feide OpenID Connect services. The components concerned are various APIs, including all APIs served at https://api.dataporten.no and https://groups-api.dataporten.no. We do not expect any disruption due to this change. But if you experience any problem or have questions relating to the change, please contact us at kontakt(a)sikt.no. Regards, Jon Kåre Hellan Sikt – Norwegian Agency for Shared Services in Education and Research

1 1

[Feide Updates] Feide OIDC ID token changes Tuesday 7.12 at 13:00
by Jon Kåre Hellan 08 Des '21

08 Des '21

On Tuesday 7.12 at 13:00 we will be adding new information elements to the ID tokens returned when logging in to Feide with OpenID Connect. Depending on which attribute groups are enabled for the application, email, name, picture, userid_sec and eduPersonPrincipalName may be included. If you experience any problem or have any questions relating to the change, please contact us at kontakt(a)uninett.no. Regards, Jon Kåre Hellan Uninett AS

1 1

[Feide Updates] Feide OIDC login endpoint infrastructure changes Thursday 21.10 at 13:00
by Morten Knutsen 15 Okt '21

15 Okt '21

On Thursday 21.10 at 13:00, we will be changing the underlying infrastructure serving https://auth.dataporten.no, the login endpoint for OIDC services in Feide. This is the rescheduled timeslot after we had to roll back the initial attempt on the 12th. If you experience any problem or have any questions relating to the change, please contact us at kontakt(a)uninett.no. Regards, Morten Knutsen Uninett AS

1 0

[Feide Updates] Feide OIDC login endpoint infrastructure changes Tuesday 12.09 at 12:15
by Morten Knutsen 12 Okt '21

12 Okt '21

On Tuesday 12.09 at 12:15, we will be changing the underlying infrastructure serving https://auth.dataporten.no, the login endpoint for OIDC services in Feide. There should be no downtime, and no user visible differences as a result of this change. If you experience any problem or have any questions relating to the change, please contact us at kontakt(a)uninett.no. Regards, Morten Knutsen Uninett AS

1 1

[Feide Updates] Feide IdP update Tuesday 05 October at 20:30
by Morten Knutsen 06 Okt '21

06 Okt '21

We will update the Feide login service on Tuesday 05.10.21, at 20:30 with the following changes: * Various accessibility fixes * Various other internal cleanups and fixes * Connection timeout increases for ID-porten and Azure AD * AzureAD bug fixes regarding the signalling of MFA/strong auth * Upgrade to use newer SimpleSAMLphp version If you have any questions regarding this update, please contact kontakt(a)uninett.no Best Regards, Morten Knutsen Uninett AS

1 1

[Feide Updates] Feide OpenID Connect certificate change Monday 16 August until Thursday 19 August
by Olav Morken 19 Aug '21

19 Aug '21

OpenID Connect ID-tokens issued by Feide are signed using a certificate that expires Wednesday 6 October 2021. To prevent any compatibility issues, we will be replacing this certificate in week 33 (Monday 16 August until Thursday 19 August). Most applications are configured to automatically fetch updated certificate information from the OpenID Connect provider. For those applications, no change should be required during this process. However, you may want to keep an eye on your application Tuesday 17 August at 13:00, which is the time that we switch to issuing ID-tokens using the new certificate. If you see any problems, you may need to force the application to refresh its configuration. The new certificate will be deployed using a key rollover. This happens in three stages: * Monday 16 August at 13:00: We will add the new certificate to the list of valid certificates for our OpenID Connect provider. When OpenID Connect clients fetch our configuration, they will receive a list of two valid certificates from the JSON Web Key Set endpoint at https://auth.dataporten.no/openid/jwks. * Tuesday 17 August at 13:00: We will configure our OpenID Connect provider to start issuing ID-tokens using the new certificate. * Thursday 19 August at 13:00: We will remove the old certificate from our configuration. After this time, our OpenID Connect will only return the new certificate from the JSON Web Key Set endpoint<https://auth.dataporten.no/openid/jwks>. If you have any questions or concerns about this change, please contact us at kontakt(a)uninett.no. Best regards, Olav Morken Uninett / Feide

1 3

[Feide Updates] Feide IdP update Monday 05 July at 12:00
by Morten Knutsen 05 Jul '21

05 Jul '21

We will update the Feide login service this coming Monday 05.07.21, at 12:00 with the following changes: * Various internal refactors and improvements. * Minor bug fixes. * Azure AD pilot: * Support for disabling the traditional Feide username/pw login. * Azure AD pilot: Support signaling of strong authentication. If you have any questions regarding this update, please contact kontakt(a)uninett.no Best Regards, Morten Knutsen Uninett AS

1 1

[Feide Updates] Feide IdP update Wednesday 03 March at 22:00
by Morten Knutsen 12 Mar '21

12 Mar '21

We will update the Feide login service tomorrow, Wednesday 03.03.21, at 22:00 with the following changes: * Various internal refactors and improvements. * Fix confusing wording in two-factor method selection dialog. * Some accessibility improvements. This update will invalidate all user sessions, and so will require all users to login again to access their services. Best Regards, Morten Knutsen Uninett AS

2 1

[Feide Updates] Planned maintenance Tue 02 Feb affecting consent functionality
by Morten Knutsen 28 Jan '21

28 Jan '21

Our consent database will be unavailable due to maintenance Tuesday 02. February 2021 between 1800 and 1900 CET. While the database is unavailable every login will require the user to give consent, even for services where consent has previously been given. If you have any questions regarding this please contact us at kontakt(a)uninett.no. -- Morten Knutsen Uninett AS

1 0