...
The following diagram describes the flow of metadata for IdP's uploaded to Skolfederation.
| Step | Variation | Action | Approximate maximum update time (AMUT) | Metadata URL | Comment |
|---|---|---|---|---|---|
| A | Skolfederation member uploads their IdP metadata to either production or trial environment and IdP metadata added to each environments upstream feed. | AMUT = 15 minutes | Upstream feeds: Production: Trial: | If the IdP is visible in the corresponding upstream feed after 15 minutes the metadata publish in Skolfederation is OK. Note that the metadata is published to AWS and presented using CloudFront CDN, which means that old metadata could be cached for a longer time than 15 minutes, increasing the AMUT. | |
| B | 1 | FIDUS downloads IdP upstream feed and updates FIDUS IdP feed | AMUT = A + 60 minutes | FIDUS IdP feed: | If the IdP is present in FIDUS IdP feed after AMUT 15 + 60 minutes, FIDUS has successfully retrieved and published the IdP metadata. If the IdP is not present, FIDUS may have problems updating its metadata. |
| 2 | FIDUS Discovery Service downloads IdP upstream feed and updates | AMUT = A + 15 minutes | If the IdP is visible in FIDUS DS after AMUT 15 + 15 minutes, the FIDUS DS has successfully retrieved and updated. If the IdP is not present, the FIDUS DS may have problems updating its metadata or service. Important: The FIDUS DS has a significantly shorter AMUT value compared to Beda and DNP. This means that even if your IdP appears in the FIDUS DS after 30 minutes, you will still need to wait until the service provider is updated (see step C.2 or D below). | ||
| C | 1 | FIDUS member federation downloads FIDUS IdP feed and publishes in member federation metadata | AMUT = A + B.1 + up to each federations metadata update settings | FIDUS member federation metadata feed if applicable (not documented here) | If the IdP is present in FIDUS member federation feed after AMUT 15 + 60 + member federation update time, the member federation has successfully retrieved and published the IdP metadata. If the IdP is not present, the FIDUS member federation may have problems updating its metadata from FIDUS IdP feed. |
| 2 | In some cases, such as Skolverket's DNP, the SP downloads IdP's directly from FIDUS IdP feed and updates | AMUT = A + B.1 + up to each service's metadata update settings | Not applicable | Not feasible to document as the update time is up to each service. Usually, at this point to test if the SP is updated, a login with the IdP to the SP is performed. | |
| D | FIDUS member federation service provider (SP 1) downloads its federation metadata and updates | AMUT= A + B.1 + C.1 + up to each service's metadata update settings | Not applicable | Not feasible to document as the update time is up to each service. Usually, at this point to test if the AMUT is complete, a login with the IdP to the SP is performed. | |
| E | Other update procedures and variations in the application which may add additional update time | Varies by service, if applicable | Not applicable |