feide-updates

feide-updates@lister.sikt.no

128 discussions

[Feide Updates] Feide IdP update Wednesday 09 September at 12:30
by Morten Knutsen 14 Sep '20

14 Sep '20

We will update the Feide login service this coming Wednesday 09.09.20 at 12:30 with the following changes: * Fix issue with misaligned logo on organisation selection page. * Fix missing translations for Feide specific attributes on consent page. * Make operational messages more visible on the login page. * Various internal fixes and refactors. -- Best Regards, Morten Knutsen Uninett AS

1 2

[Feide Updates] Rettet feil med quoting av spesialtegn i groups-api.dataporten.no
by Jon Kåre Hellan 21 Aug '20

21 Aug '20

Vi har blitt oppmerksom på at oppslag av gruppemedlemmer eller gruppedetaljer ikke virker for grupper som har '/' i lokal gruppe-ID. Vi oppdaget også at vi ikke behandlet '~' riktig i forhold til spesifikasjonen. Begge feil er nå rettet, men rettingen medfører at kallet https://groups-api.dataporten.no/groups/me/groups gir ut en annen ID enn tidligere for grupper med disse tegnene i lokal gruppe-ID. Lokal gruppe-ID bestemmes av institusjonen selv, og brukes gjerne til å uttrykke tilhørighet til klasse eller basisgruppe. Eksempler: 'Trinn 7', 'Basisgruppe 6/A'. Vi har spesifisert hvordan dette skal kodes i https://docs.feide.no/reference/schema/info_go/go_attributter_chA4.html#for…. Vi tror ikke disse tegnene har vært mye brukt, i og med at ingen har rapportert feilen før nå. Oppslag av gruppemedlemmer og gruppedetaljer har aldri virket for slike grupper. Men det kan finnes applikasjoner som leser ut gruppe-IDer fra https://groups-api.dataporten.no/groups/me/groups og sjekker om de kjenner dem igjen. Hvis lokal gruppe-ID inneholder '/' eller '~', vil de nå ikke bli gjenkjent. Eksempler: Lokal gruppe-ID: "1/A" Gammel ID: "fc:gogroup:spusers.feide.no:b:NO856326499:1/a:2020-07-01:2021-07-15" Ny ID: "fc:gogroup:spusers.feide.no:b:NO856326499:1%2Fa:2020-07-01:2021-07-15" Lokal gruppe-ID: "Tilde~" Gammel ID: "fc:gogroup:spusers.feide.no:b:NO856326499:tilde%7E:2020-07-01:2021-07-15" Ny ID: "fc:gogroup:spusers.feide.no:b:NO856326499:tilde~:2020-07-01:2021-07-15" Vi beklager uleiligheten

1 0

[Feide Updates] Feide IdP update Monday 20 July at 11:00
by Olav Morken 20 Jul '20

20 Jul '20

Hi, we will deploy a update to our IdP (https://idp.feide.no) Monday 20 July at 11:00. This update contains the first iteration of ID-porten support. (This allows login using ID-porten for organizations where it is enabled, but not yet using ID-porten for multi-factor authentication.) In addition, there is bugfix for a broken link at https://innsyn.feide.no/. This update is currently running at our test system (https://idp-test.feide.no). If you have any questions or concerns about this update, please let us know at kontakt(a)uninett.no. Best regards, Olav Morken Uninett / Feide

1 1

[Feide Updates] HTTPS configuration changes for Feide login system Wednesday 15 July 2020
by Olav Morken 15 Jul '20

15 Jul '20

Hi, in an effort to improve the security of connections to our login system, we are making adjustments to the TLS configuration used for HTTPS. In particular, we are disabling support for old TLS versions and deprecated ciphers, and enabling HTTP strict transport security. This change is currently active at our test system (idp-test.feide.no). We will activate it on our production system Wednesday 15 July 2020 at 11:00. If you have any questions or concerns about this change, please let us know at kontakt(a)uninett.no. Best regards, Olav Morken Uninett / Feide

1 1

[Feide Updates] HTTPS certificate change for Feide login service (idp.feide.no)
by Olav Morken 02 Jul '20

02 Jul '20

The current HTTPS certificate for https://idp.feide.no/ expires 17 July 2020. We are going to replace the current certificate with a new certificate Thursday 2 July 2020 at 11:00. The new certificate is issued from the "AAA Certificate Services" root certificate, which is supported by all major browsers and platforms. https://idp-test.feide.no/ has been updated to the new root certificate, and can be used to verify compatibility. Best regards, Olav Morken Uninett / Feide

1 1

[Feide Updates] Feide IdP update Tuesday 30 June at 21:00
by Morten Knutsen 24 Jun '20

24 Jun '20

We will update the Feide login service Tuesday 30.06.20 at 2100 with the following changes: * New controllers and endpoints for parts of the login flow. * Improved error reporting on unhandled exceptions. * Various accessibility improvements in the UI. * Improve robustness of SMS sending and add timeout per provider. The change of endpoints for our login flow might impact you if you have automated tests not driven through a browser. Specifically, any tests using POST requests to /login.php will stop working. /login.php is now a simple redirect to either the organization selection page (/selectorg), or the login page (/login), depending on the context. Best Regards, Morten Knutsen Uninett AS

1 0

[Feide Updates] Feide IdP update Thursday 23 April at 22:00
by olav.morken＠uninett.no 20 Apr '20

20 Apr '20

Hi, we will deploy a IdP update Thursday 23 April at 22:00. Changes in this update: * Fix missing autofocus in SMS code field. * Update SimpleSAMLphp to version 1.18.6. * Log TLS ciphersuite and version when users authenticate. * Update internal pages on the IdP to new templates. * Remove two unused API endpoints from the IdP. As a side effect of this update, all existing login sessions in Feide will be terminated, and users will have to enter their username and password the next time they log into a service using Feide. (Parts of this update is the same as the previous update, since we had to roll back that update due to problems accessing the sessions store under high load.) Best regards, Olav Morken Uninett / Feide

1 0

[Feide Updates] Feide IdP update Tuesday 10 March at 22:00
by Morten Knutsen 05 Mar '20

05 Mar '20

Hi, we will deploy a IdP update Tuesday 10th of March 22:00. This update upgrades the version of SimpleSAMLphp used in the Feide IdP to version 1.18.4. As a side effect of this update, all existing login sessions in Feide will be terminated, and users will have to enter their username and password the next time they log into a service using Feide. In addition to the upgrade of SimpleSAMLphp, this update also adds more log data indicating which version of TLS clients are using and what TLS cipher suites are in use. -- Morten Knutsen Uninett AS

1 0

[Feide Updates] Feide IdP update Wednesday 26 February at 13:00
by Olav Morken 26 Feb '20

26 Feb '20

Hi, we are going to deploy a new version of the Feide IdP at 13:00 Wednesday 26 February. This update makes a few minor modification to the pages where users enter two-factor authentication codes, to make them more user friendly. Best regards, Olav Morken Uninett / Feide

1 1

[Feide Updates] Feide IP address changes Monday 24 February
by Olav Morken 24 Feb '20

24 Feb '20

Hi, we are going to be changing the IP addresses<https://en.wikipedia.org/wiki/IP_address> of the Feide login service at https://idp.feide.no/ Monday 24 February at 11:00. Most organizations will not not need to do anything, as the change does not affect connections from Feide to user directories (LDAP). However, if you have any firewall policies or other IP address restrictions configured today that allows web access to Feide, those may need to be updated. For example, if you have restricted networks for final examinations or other tests, you may have to update the restrictions to allow access to the new IP addresses for the Feide login service. The following addresses will be the new IP addresses for idp.feide.no: * 158.36.100.54 * 158.36.100.118 * 2001:700:2:8500::54 * 2001:700:2:8600::54 (Note that as part of this change we are adding IPv6 support to the Feide login service.) In addition, we have a set of IP addresses to a hot standby (backup) system: * 158.36.100.7 * 158.36.100.71 * 2001:700:2:8500::7 * 2001:700:2:8600::7 These addresses are not active normally, but will be used in case of failures at our primary installation. You must make sure that your networks allow connections to these addresses as well, since we can switch to these addresses at any time with no notice. The new IP addresses are already available, so you can verify connectivity to idp.feide.no at the new addresses, for example by adding the addresses to a hosts-file<https://en.wikipedia.org/wiki/Hosts_(file)>. The new IP addresses connect to new load balancers for the Feide login system. These new load balancers have already been in use for the test system at https://idp-test.feide.no/ since 21 January. A set of similarly configured load balancers have been in use for our standby system since 2017. If you have any questions about this change, please contact us at support(a)feide.no<mailto:support@feide.no>. Best regards, Olav Morken Uninett / Feide

1 1

← Newer
1
2
3
4
5
6
7
...
13
Older →

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

feide-updates