The Skolfederation production environment is accessible only to members of Skolfederation. All member metadata published in the Skolfederation aggregated metadata feed is by confirmed member organizations, that must comply with Skolfederations trust framework and technical requirements.
Access to Skolfederation production environment
All members of Skolfederation gain automatic access to the production environment. On finalization of membership, all Technical Contacts can access Federationsadmin by using their e-identification (BankID or Freja eID+). Technical Contacts also have the ability to create Technical Agents to delegate access to the members metadata management. More on creating and managing Technical Agents is found in the user guide.
If your organization became a Skolfederation member before 19th November 2019
Uploading metadata to Skolfederation
Uploading metadata in Federationsadmin
To upload metadata to Skolfederation, log on to Federationsadmin with your e-identification (BankID or Freja eID+). Note that you have to be either the members Technical Contact or a Technical Agent to gain access.
Sending metadata manually to federation operator
An alternative to managing the metadata in Federationsadmin is to use the form linked below to send metadata to the federation operator for validation and verification. If there are errors, the federation operator will request corrections. If everything is ready for upload, the federation operator will contact the Technical Contact to validate metadata checksum (SHA1) before publication to federation.
Metadata for Skolfederation is found below.
Public key for verifying signature of federation metadata is found below.
Certificate file: https://skolfederation.se/app/uploads/2016/05/skolfederation-3_1.crt
Verify metadata with certificate
We recommend verifying the fingerprint of the signing certificate with the federation operator before adding the certificate to your IdP/SP trust. After trusting the certificate, always verify federation metadata signature with signing certificate to guarantee metadata integrity.
Discovery Service (DS)
A centralized SAML 2.0 Discovery Service for Skolfederation is found below.
The DS is populated with all IdP's from the Skolfederation metadata. The names shown in the DS are based on the OrganizationDisplayName attribute from the IdP metadata.
Use other ways of discovery
Note that the federation operator does not recommend the usage of the centralized DS for discovery of IdP's in production environments, due to limitations in user experience. If required, service providers are recommended to implement a method of discovery better suited to their service.
Test services in production?
Currently, there are no test services available in production. For testing your IdP or SP solution, please feel free to use the test services in the test environment Skolfederation Trial.