You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 2 Next »

Introduction

This guide describes how to publish SAML metadata in Lösning för federerad åtkomst till Klassa.

This guide is for non-municipal organizations access to Klassa. If you represent a Swedish municipality (kommun), please use this guide instead: Technical Metadata Connection Guide (Fedkom)

Choose the section that matches the entity you want to upload:

Prerequisites

The organization must have signed the membership agreement for federated access to Klassa.

Only entities correctly processed according to this guide are included in the Klassa metadata feed.

Mandatory Entity Attribute 

To be included in the Klassa metadata feed, an entity attribute must be included in metadata. For information about the entity attribute, see the Klassa federation policy.

Metadata validator

A metadata validator for Klassa is available here: https://validator.openfed.se/fedkom. Use it to check that your SAML metadata conforms to the technical profile and federation policy before submitting or publishing it.

opt-in via Skolfederation or Sambi

Note that metadata opting-in via Skolfederation or Sambi need to follow the Fedkom/Klassa technical profile and policy to be accepted. If you intend to opt-in via one of these federations, please use the validator above as well.

Metadata example

Example metadata for SAML 2.0 Identity Provider and Service Provider are available at the link below.

https://md.openfed.se/metadata-example/

The metadata are conformant to SAML 2.0 WebSSO Technology Profile and the examples show what elements in metadata relate to which requirement from the technology profile.

You want to upload an Identity Provider (IdP)

Edit your metadata

  • Edit your metadata locally.

  • Validate your metadata with the metadata validator and correct your metadata if any errors are present.

  • If it's a new IdP, ensure the entityID is unique within the federation

Choose your publication path

A. Not a member of Skolfederation/Sambi

No access to Federationsadmin.

Action

If compliant, the IdP is published in the Klassa metadata feed.

B. Member of Skolfederation/Sambi – manual submission

Use this path if:

  • You choose not to publish via Federationsadmin, or

  • The IdP does not belong within the scope of Skolfederation or Sambi.

Action

If compliant, the IdP is published in the Klassa metadata feed.

C. Member of Skolfederation/Sambi – Via Federationsadmin

Use this path only if the IdP belongs within the scope of the federation used for aggregation.

Action

  1. Edit the metadata locally.

  2. Add the mandatory Klassa entity attribute (see below).

  3. Validate your metadata with the metadata validator and correct your metadata if any errors are present.

  4. Log in to Federationsadmin.

  5. Upload the updated metadata.

Publication flow

Federationsadmin → Skolfederation/Sambi → Klassa metadata feed.

Only correctly marked IdPs are included.

Manual submission instructions

Validate your metadata with the metadata validator and correct your metadata if any errors are present.

Send an email to:

info@svenskafederationer.se

Include:

  • The complete SAML 2.0 metadata XML (attached file)

  • Organization name

  • Contact name

  • Contact email

If the metadata is valid, the federation operator will contact the organization’s Technical Contact to validate the file checksum by phone. After successful validation, the entity is published in the Klassa metadata feed.

  • No labels