Hi,

we are going to migrate the Feide SAML service to the same platform as

our other services. We will perform this change Tuesday 16 January at

18:00.

This change affects our SAML login service, running at idp.feide.no.

When we make the change, existing sessions for users will be

interrupted, so users will have to log in again. A few users will also

receive the information screen about attribute transfer to services

again after the migration. Other than this, the change will not have

any user visible impact.

As a result of this change, the IP addresses of idp.feide.no will

change to the following IP addresses:

If you have any firewalls that restrict outgoing connections, you may

have to update them to allow connections to the new IP addresses.

This change also removes support for an old TLS cipher:

This cipher is used by some old versions of Safari. It is already

disabled for services logging in using OpenID connect, so this change

should not affect many users.

The IP addresses that Feide uses to contact the LDAP servers at the

organizations as part of the login process will change, but the new IP

addresses are already in use for other parts of Feide. All

organizations already allow access from the new IP addresses.

The issuer of the certificate for idp.feide.no will change. The

current certificate is issued by Sectigo, while the new certificate

will be issued by Let's Encrypt.

If you have any questions or concerns wrt. this change, please contact

us at: kontakt@sikt.no

Best regards,

Olav Morken

Sikt / Feide