- feide-updates - lister.unit.no

[Feide Updates] Feide IdP update Tuesday 30 June at 21:00
by Morten Knutsen 24 Jun '20

24 Jun '20

We will update the Feide login service Tuesday 30.06.20 at 2100 with the following changes: * New controllers and endpoints for parts of the login flow. * Improved error reporting on unhandled exceptions. * Various accessibility improvements in the UI. * Improve robustness of SMS sending and add timeout per provider. The change of endpoints for our login flow might impact you if you have automated tests not driven through a browser. Specifically, any tests using POST requests to /login.php will stop working. /login.php is now a simple redirect to either the organization selection page (/selectorg), or the login page (/login), depending on the context. Best Regards, Morten Knutsen Uninett AS

1 0

[Feide Updates] Feide IdP update Thursday 23 April at 22:00
by olav.morken＠uninett.no 20 Apr '20

20 Apr '20

Hi, we will deploy a IdP update Thursday 23 April at 22:00. Changes in this update: * Fix missing autofocus in SMS code field. * Update SimpleSAMLphp to version 1.18.6. * Log TLS ciphersuite and version when users authenticate. * Update internal pages on the IdP to new templates. * Remove two unused API endpoints from the IdP. As a side effect of this update, all existing login sessions in Feide will be terminated, and users will have to enter their username and password the next time they log into a service using Feide. (Parts of this update is the same as the previous update, since we had to roll back that update due to problems accessing the sessions store under high load.) Best regards, Olav Morken Uninett / Feide

1 0

[Feide Updates] Feide IdP update Tuesday 10 March at 22:00
by Morten Knutsen 05 Mar '20

05 Mar '20

Hi, we will deploy a IdP update Tuesday 10th of March 22:00. This update upgrades the version of SimpleSAMLphp used in the Feide IdP to version 1.18.4. As a side effect of this update, all existing login sessions in Feide will be terminated, and users will have to enter their username and password the next time they log into a service using Feide. In addition to the upgrade of SimpleSAMLphp, this update also adds more log data indicating which version of TLS clients are using and what TLS cipher suites are in use. -- Morten Knutsen Uninett AS

1 0

[Feide Updates] Feide IdP update Wednesday 26 February at 13:00
by Olav Morken 26 Feb '20

26 Feb '20

Hi, we are going to deploy a new version of the Feide IdP at 13:00 Wednesday 26 February. This update makes a few minor modification to the pages where users enter two-factor authentication codes, to make them more user friendly. Best regards, Olav Morken Uninett / Feide

1 1

[Feide Updates] Feide IP address changes Monday 24 February
by Olav Morken 24 Feb '20

24 Feb '20

Hi, we are going to be changing the IP addresses<https://en.wikipedia.org/wiki/IP_address> of the Feide login service at https://idp.feide.no/ Monday 24 February at 11:00. Most organizations will not not need to do anything, as the change does not affect connections from Feide to user directories (LDAP). However, if you have any firewall policies or other IP address restrictions configured today that allows web access to Feide, those may need to be updated. For example, if you have restricted networks for final examinations or other tests, you may have to update the restrictions to allow access to the new IP addresses for the Feide login service. The following addresses will be the new IP addresses for idp.feide.no: * 158.36.100.54 * 158.36.100.118 * 2001:700:2:8500::54 * 2001:700:2:8600::54 (Note that as part of this change we are adding IPv6 support to the Feide login service.) In addition, we have a set of IP addresses to a hot standby (backup) system: * 158.36.100.7 * 158.36.100.71 * 2001:700:2:8500::7 * 2001:700:2:8600::7 These addresses are not active normally, but will be used in case of failures at our primary installation. You must make sure that your networks allow connections to these addresses as well, since we can switch to these addresses at any time with no notice. The new IP addresses are already available, so you can verify connectivity to idp.feide.no at the new addresses, for example by adding the addresses to a hosts-file<https://en.wikipedia.org/wiki/Hosts_(file)>. The new IP addresses connect to new load balancers for the Feide login system. These new load balancers have already been in use for the test system at https://idp-test.feide.no/ since 21 January. A set of similarly configured load balancers have been in use for our standby system since 2017. If you have any questions about this change, please contact us at support(a)feide.no<mailto:support@feide.no>. Best regards, Olav Morken Uninett / Feide

1 1

[Feide Updates] Feide IdP update Thursday 6 February at 13:00
by Olav Morken 06 Feb '20

06 Feb '20

Hi, we will deploy a IdP update Thursday 6th of February at 13:00. This update contains two changes: * A minor adjustment to the login page if the screen is small -- we will then remove some unnecessary elements to make the login button easier to reach. * An update to how we set cookies on the login system to be compatible with the SameSite cookie changes that Google Chrome is rolling out from Monday 17th of February: https://blog.chromium.org/2020/02/samesite-cookie-changes-in-february.html Best regards, Olav Morken Uninett / Feide

1 1

[Feide Updates] Feide IdP update Wednesday 27 November at 12:30
by Morten Knutsen 27 Nov '19

27 Nov '19

Hi, we will deploy a IdP update Wednesday 27th of November at 12:30. It updates the minor version of SimpleSAMLphp used in the IdP. In addition it contains the following changes: * Changes to support org initiated 2FA also for OIDC/Oauth2 services. * Improve support for organization numbers used by foreign schools. Best regards, Morten Knutsen Uninett AS

2 1

[Feide Updates] Planned maintenance on Feide network infrastructure Thursday 14.11
by Morten Knutsen 08 Nov '19

08 Nov '19

On Thursday 14.11 sometime between 19-21 we will be applying a configuration change on the central Feide network switches. The switches are fully redundant and we don't expect any production issues in connection with this change. -- Best Regards, Morten Knutsen Uninett AS

1 0

[Feide Updates] Feide IdP update Tuesday 5 November at 13:00
by Morten Knutsen 05 Nov '19

05 Nov '19

Hi, we will deploy a IdP update Tuesday 5 November at 13:00. It updates the version of SimpleSAMLphp used in the IdP. In addition it contains the following changes: * Cleanup and revise code to use newer PHP coding standards. * Fix inverted logic error in the new Consent API. * Various logging cleanups. Best regards, Morten Knutsen Uninett AS

2 1

[Feide Updates] Feide IdP update Tuesday 22 Oct at 13:00
by Morten Knutsen 22 Okt '19

22 Okt '19

Hi, we will deploy a IdP update Tuesday 22 October at 13:00. This update adds an API needed for the new Innsyn service. In addition to we also do two other minor updates to the IdP software: * Reduce warnings and remove deprecated use of classes and assertions. * Security improvements for 2FA authentication in merger login. Best Regards, Morten Knutsen Uninett AS

2 1