Hi,
we will upgrade our IdP software on Wednesday 14th of October at 13:00. There are two main changes in this update:
* Move the support for higher level of authentication (two-factor) into production. In practice, this means removal of the support that we used in the pilot, and replacing it with the proper attributes from norEduPerson specification version 1.6.
* Add preliminary support for the new user account chooser for handling organizations merging. The goal of this change is to simplify the user interactions required when a user has an account in two organizations that are merging. More information about this is available here:
https://www.feide.no/nyhet/l%C3%B8sning-fusjonerte-organisasjoner
This update is currently deployed to our test system.
Best regards, Olav Morken UNINETT / Feide
Hi,
the update today was rolled back after 15-20 minutes after we discovered that several users had problems logging in. The problem appears to have affected organizations that were part of the pilot testing of two-factor, causing some of their users to be unable to log in.
Best regards, Olav Morken UNINETT / Feide
On 2015-10-13 10:32, Olav Morken wrote:
Hi,
we will upgrade our IdP software on Wednesday 14th of October at 13:00. There are two main changes in this update:
- Move the support for higher level of authentication (two-factor) into
production. In practice, this means removal of the support that we used in the pilot, and replacing it with the proper attributes from norEduPerson specification version 1.6.
- Add preliminary support for the new user account chooser for handling
organizations merging. The goal of this change is to simplify the user interactions required when a user has an account in two organizations that are merging. More information about this is available here:
https://www.feide.no/nyhet/l%C3%B8sning-fusjonerte-organisasjoner
This update is currently deployed to our test system.
Best regards, Olav Morken UNINETT / Feide
Hi,
we will deploy an updated version of this update tomorrow, Thursday 15th of October, at 13:00.
We have identified the issue that caused the error that several people experienced, and have fixed the incorrect code. The issue was caused by a fallback code path used during the initial two-factor pilot. This code path was not supposed to be part of the production code for two-factor authentication, and has now been removed.
Best regards, Olav Morken UNINETT / Feide
On 2015-10-13 10:32, Olav Morken wrote:
Hi,
we will upgrade our IdP software on Wednesday 14th of October at 13:00. There are two main changes in this update:
- Move the support for higher level of authentication (two-factor) into
production. In practice, this means removal of the support that we used in the pilot, and replacing it with the proper attributes from norEduPerson specification version 1.6.
- Add preliminary support for the new user account chooser for handling
organizations merging. The goal of this change is to simplify the user interactions required when a user has an account in two organizations that are merging. More information about this is available here:
https://www.feide.no/nyhet/l%C3%B8sning-fusjonerte-organisasjoner
This update is currently deployed to our test system.
Best regards, Olav Morken UNINETT / Feide
Hi,
this update was deployed at 13:18 today. SO far we haven't seen any problems with it.
Best regards, Olav Morken UNINETT / Feide
On 2015-10-14 14:28, Olav Morken wrote:
Hi,
we will deploy an updated version of this update tomorrow, Thursday 15th of October, at 13:00.
We have identified the issue that caused the error that several people experienced, and have fixed the incorrect code. The issue was caused by a fallback code path used during the initial two-factor pilot. This code path was not supposed to be part of the production code for two-factor authentication, and has now been removed.
Best regards, Olav Morken UNINETT / Feide
On 2015-10-13 10:32, Olav Morken wrote:
Hi,
we will upgrade our IdP software on Wednesday 14th of October at 13:00. There are two main changes in this update:
- Move the support for higher level of authentication (two-factor) into
production. In practice, this means removal of the support that we used in the pilot, and replacing it with the proper attributes from norEduPerson specification version 1.6.
- Add preliminary support for the new user account chooser for handling
organizations merging. The goal of this change is to simplify the user interactions required when a user has an account in two organizations that are merging. More information about this is available here:
https://www.feide.no/nyhet/l%C3%B8sning-fusjonerte-organisasjoner
This update is currently deployed to our test system.
Best regards, Olav Morken UNINETT / Feide
Hi,
we will deploy a new update to our login servers on THursday 5th of Novelber at 14:00. update contains a few fixes, mostly minor:
* Fixes error handling if we are unable to retrieve the users organization attributes during login. * Fixes transmitting of empty eduPersonEntitlement attribute to due to processing of organization merging data in the user account. If the user only has organization merging attribute values in eduPersonEntitlement, we would end up transmitting an empty eduPersonEntitlement attribute to SPs, instead of not transmitting the eduPersonEntitlement attribute at all. * A couple of translation fixes.
Best regards, Olav Morken UNINETT / Feide
Hi,
this update was deployed about 20 minutes ago. We haven't seen any problems with it.
Best regards, Olav Morken UNINETT / Feide
On 2015-11-04 11:13, Olav Morken wrote:
Hi,
we will deploy a new update to our login servers on THursday 5th of Novelber at 14:00. update contains a few fixes, mostly minor:
- Fixes error handling if we are unable to retrieve the users
organization attributes during login.
- Fixes transmitting of empty eduPersonEntitlement attribute to due to
processing of organization merging data in the user account. If the user only has organization merging attribute values in eduPersonEntitlement, we would end up transmitting an empty eduPersonEntitlement attribute to SPs, instead of not transmitting the eduPersonEntitlement attribute at all.
- A couple of translation fixes.
Best regards, Olav Morken UNINETT / Feide
Hi,
we will change the method used to distribute configuration changes to our login servers on Thursday 19th of November at 13:00.
The change is a transition from Subversion to Git for storing the configuration, as well as a replacement of several supporting scripts that are responsible for maintaining parts of the configuration.
The new configuration system has been active on our test system for a few weeks now, without any problems.
Best regards, Olav Morken UNINETT / Feide
Hi,
this change has now been applied to all our production servers.
Best regards, Olav Morken UNINETT / Feide
On 2015-11-17 15:30, Olav Morken wrote:
Hi,
we will change the method used to distribute configuration changes to our login servers on Thursday 19th of November at 13:00.
The change is a transition from Subversion to Git for storing the configuration, as well as a replacement of several supporting scripts that are responsible for maintaining parts of the configuration.
The new configuration system has been active on our test system for a few weeks now, without any problems.
Best regards, Olav Morken UNINETT / Feide