Release-check
Select IdP
Released attributes from IdP
Instructions
Click on the green button to see what attributes your Identity Provider releases.
Description of all test available in the eduGAIN test suite:
- The Attributes tab shows all attributes the service release to the entityId https://release-check.
. /shibboleth. The entityId uses the entity categories: - REFEDS Personalized Access Entity Category,
- REFEDS Research and Scholarship Entity Category, and
- REFEDS Data Protection Code of Conduct ver 2.0 Entity Category.
- The Entity category tab does an exetensive testing of that an Identity Provider follows Best Practice for attribute release via entity categories.
- The MFA tab checks if an Identity Provider is correctly configured for handling request for multi-factor login.
- The ESI tab verifies if the Identity Provider release the right attributes for the European Digital Student Service Infrastructure.
eduGAIN AuthnContextClassRef tester
Instructions
The Authentication test is a two step process. The first step is to test an AuthnContextClassRef and the second step is to verify that forceAuthn works as expected for that AuthnContextClassRef. The restults from this tests are NOT saved exept for tests done with REFEDS MFA.
Step 1
Choose AuthnContextClassRef to test:eduGAIN Best Practice Attribute Release check
Instructions
In order for eduGAIN to work as effectively as possible for students and employees as well as for service providers and identity providers, eduGAIN recommends that service providers use entity categories to get the attributes that they require.
In order for services within the eduGAIN federation to work as effectively as possible, eduGAIN recommends the use of entity categories. Entity categories benefits not only students and employees but also administrators of relying and identity providers by providing a stable framework for the release of attributes.
The eduGAIN best practice attribute release check consists of the following tests:
- assurance - Assurance Attribute test
- noec - No EC (shall not send any attributes!)
- anonymous - REFEDS Anonymous Access
- pseudonymous - REFEDS Pseudonymous Access
- personalized - REFEDS Personalized Access
- cocov2 - REFEDS CoCo
- rands - REFEDS R&S
Multiple Code of Conduct test require different attributes which the IdP either SHOULD or SHOULD NOT release in accordance REFEDS/GÉANT Code of Conduct.
eduGAIN Best Practice Attribute Release check
Instructions
European Student Identifier uses the entity category https://myacademicid.org/entity-categories/esi for release of attributes from the user's identity provider. This test verifies that all required attributes are released during login.