CINXE.COM

<!DOCTYPE html> <html lang="en" xml:lang="en"> <head><script type="text/javascript" src="https://web-static.archive.org/_static/js/bundle-playback.js?v=7YQSqjSh" charset="utf-8"></script> <script type="text/javascript" src="https://web-static.archive.org/_static/js/wombat.js?v=txqj7nKC" charset="utf-8"></script> <script>window.RufflePlayer=window.RufflePlayer||{};window.RufflePlayer.config={"autoplay":"on","unmuteOverlay":"hidden"};</script> <script type="text/javascript" src="https://web-static.archive.org/_static/js/ruffle/ruffle.js"></script> <script type="text/javascript"> __wm.init("http://web.archive.org/web"); __wm.wombat("https://www.ukfederation.org.uk/","20221005222342","http://web.archive.org/","web","https://web-static.archive.org/_static/", "1665008622"); </script> <link rel="stylesheet" type="text/css" href="https://web-static.archive.org/_static/css/banner-styles.css?v=p7PEIJWi" /> <link rel="stylesheet" type="text/css" href="https://web-static.archive.org/_static/css/iconochive.css?v=3PDvdIFv" />  <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <title>UK federation information centre | Home / Home browse</title> <style type="text/css" media="all">@import url( /web/20221005222342cs_/https://www.ukfederation.org.uk/css/new.css );</style> <link rel="stylesheet" href="/web/20221005222342cs_/https://www.ukfederation.org.uk/pmwiki/pub/skins/home/pmwiki.css"> <style type="text/css"></style> <link rel="stylesheet" href="/web/20221005222342cs_/https://www.ukfederation.org.uk/pmwiki/pub/wsplus/wsplus.css" type="text/css"/>  <meta name="robots" content="index,follow"/> <style> body{margin:0px;} html{padding:0px;} </style> <meta name="viewport" content="width=device-width, initial-scale=1"> </head> <body> <div id="wrapper"> <header aria-label="header"> <div><a href="//web.archive.org/web/20221005222342/https://www.jisc.ac.uk/" title="Go to the Jisc homepage"><img height="36" width="36" src="/web/20221005222342im_/https://www.ukfederation.org.uk/images/jisc-logo.svg" alt="Jisc"></a></div> <div id="header"> <div id="image"><img src="/web/20221005222342im_/https://www.ukfederation.org.uk/images/orange-topv3.jpg" alt="Masthead"/></div> <div id="nav" role="navigation" title="header menu"><ul><li class="first"> <a class="urllink" href="/web/20221005222342/https://www.ukfederation.org.uk/" rel="nofollow">Home</a> </li><li><a class="urllink" href="/web/20221005222342/https://www.ukfederation.org.uk/news/" rel="nofollow">News</a> </li><li><a class="wikilink" href="http://web.archive.org/web/20221005222342/https://www.ukfederation.org.uk/content/Documents/AvailableServices">Services</a> </li><li><a class="wikilink" href="http://web.archive.org/web/20221005222342/https://www.ukfederation.org.uk/content/Documents/JoinFederation">Join</a> </li><li><a class="wikilink" href="http://web.archive.org/web/20221005222342/https://www.ukfederation.org.uk/content/Documents/FedSupport">Support</a> </li><li><a class="wikilink" href="http://web.archive.org/web/20221005222342/https://www.ukfederation.org.uk/content/Documents/Welcome">Info Centre</a> </li></ul> </div> </div></header> <div id="body"> <div id="left" role="navigation" aria-label="navigation" aria-labelledby="left">  <div class="box"> <div class="box-top"></div> <div class="box-cont"><h3 style="text-align: center;">Useful Links</h3> <p><a class="wikilink" href="http://web.archive.org/web/20221005222342/https://www.ukfederation.org.uk/content/Documents/JoinFederation">Join the federation</a><br/><br/><a class="wikilink" href="http://web.archive.org/web/20221005222342/https://www.ukfederation.org.uk/content/Documents/Registration">Register an entity</a><br/><br/><a class="wikilink" href="http://web.archive.org/web/20221005222342/https://www.ukfederation.org.uk/content/Documents/FedDocs">Federation service documents</a><br/><br/><a class="wikilink" href="http://web.archive.org/web/20221005222342/https://www.ukfederation.org.uk/content/Documents/UKFederationHelpdesk">Helpdesk</a><br/><br/><a class="wikilink" href="http://web.archive.org/web/20221005222342/https://www.ukfederation.org.uk/content/Documents/OperationalInfo">Operational Information</a><br/><br/><a class="wikilink" href="http://web.archive.org/web/20221005222342/https://www.ukfederation.org.uk/content/Documents/UsingThisWebsite">How to use this website</a><br/><br/><a class="urllink" href="http://web.archive.org/web/20221005222342/https://www.jisc.ac.uk/consultancy/trust-and-identity" rel="nofollow">Jisc Consultancy</a><br/><br/> </p> <div class="vspace"></div> </div> <div class="box-end"></div></div> <div class="shim"> </div> <div class="shim"> </div> <div class="box"> <div class="box-top"></div> <div class="box-cont"><h3 style="text-align: center;">Latest News Headlines</h3> <div class="fpltemplate"><p>22 Jun 22: <a class="wikilink" href="http://web.archive.org/web/20221005222342/https://www.ukfederation.org.uk/content/News/2022-06-22-wayf-deprecation">Removal of WAYF protocol from CDS (Central Discovery Service) on 28 June 2022</a><br/> 01 Apr 22: <a class="wikilink" href="http://web.archive.org/web/20221005222342/https://www.ukfederation.org.uk/content/News/2022-04-01-ShibIdP-Update">Important Shibboleth Identity Provider (IdP) update V4.1.6</a><br/> 25 Mar 22: <a class="wikilink" href="http://web.archive.org/web/20221005222342/https://www.ukfederation.org.uk/content/News/2022-03-25-THWW">UK federation "Town Hall" week webinars</a><br/> 27 Jan 22: <a class="wikilink" href="http://web.archive.org/web/20221005222342/https://www.ukfederation.org.uk/content/News/2022-01-27-High-CPU-in-Jetty">Shibboleth IdP 4.1.4 / Jetty v9.4.39 known issue with high CPU usage</a><br/> 14 Jan 22: <a class="wikilink" href="http://web.archive.org/web/20221005222342/https://www.ukfederation.org.uk/content/News/2022-01-14-RoMUpdate">Update to UK federation Rules of Membership</a><br/> </p> </div> <h3 style="text-align: center;"><a class="wikilink" href="http://web.archive.org/web/20221005222342/https://www.ukfederation.org.uk/content/News/Archive">News Archive</a></h3> <p style="text-align: center;"><strong><a class="urllink" href="/web/20221005222342/https://www.ukfederation.org.uk/news-rss/" rel="nofollow">RSS news feed</a></strong> </p> </div> <div class="box-end"></div></div> </div> <div id="right"> <div id="wbar" role="navigation" title="tool navigation"><ul><li><a class="wikilink" href="http://web.archive.org/web/20221005222342/https://www.ukfederation.org.uk/content/Site/Search?action=search">Search</a> </li></ul> </div> <div class="shim"> </div><div id="main-content" role="main" aria-label="main"> <h1 class="home">UK Access Management Federation<br/>for Education and Research</h1> <p>The UK federation is operated by Jisc and provides a single solution to accessing online resources and services for education and research. Here is some information on <a class="wikilink" href="http://web.archive.org/web/20221005222342/https://www.ukfederation.org.uk/content/Documents/HowItWorks">how it works</a> and its <a class="wikilink" href="http://web.archive.org/web/20221005222342/https://www.ukfederation.org.uk/content/Documents/Benefits">benefits</a>. </p> <p class="vspace"><a class="wikilink" href="http://web.archive.org/web/20221005222342/https://www.ukfederation.org.uk/content/Documents/EligibleOrganisations">Eligible organisations</a> are invited to <a class="wikilink" href="http://web.archive.org/web/20221005222342/https://www.ukfederation.org.uk/content/Documents/JoinFederation">join</a> the <a class="wikilink" href="http://web.archive.org/web/20221005222342/https://www.ukfederation.org.uk/content/Documents/MemberList">current membership</a>. </p> <div class="vspace"></div><h2>Latest news</h2> <div class="fpltemplate"><div class="blogpost"> <h3>Removal of WAYF protocol from CDS (Central Discovery Service) on 28 June 2022</h3> <p><span style="font-size:83%"> Posted on Wednesday, 22 June 2022 </span> </p> <p class="vspace"><a name="entrybody" id="entrybody"></a> The work to remove the legacy WAYF protocol support from our CDS is progressing well. Helpdesk staff have worked with almost all operators of WAYF-using service providers (<span class="wikiword">SPs</span>) to migrate to the DS protocol (which supports SAML 2) or alternative discovery solutions. There are a handful of cases where we have had no response from the SP operators after repeated attempts, and we are continuing to chase these SP operators. </p> <p class="vspace">A consequence of this work is that <span class="wikiword">IdP</span> operators will no longer be easily able to test SAML 1 endpoints using the UK federation Test SP (because we used the WAYF protocol, too). If you need alternative options, or have any questions, please contact Matt Huckson through the UK federation helpdesk at <a class="urllink" href="http://web.archive.org/web/20221005222342/mailto:service@ukfederation.org.uk" rel="nofollow">service@ukfederation.org.uk</a> </p> <div class="vspace"></div></div> <div class="blogpost"> <h3>Important Shibboleth Identity Provider (<span class="wikiword">IdP</span>) update V4.1.6</h3> <p><span style="font-size:83%"> Posted on Friday, 1 April 2022 </span> </p> <p class="vspace"> The Shibboleth project has released V4.1.6 of the Identity Provider <strong>[1]</strong> to address this week's Spring vulnerability. If you are running Shibboleth V4.1.x already this should be a straight forward upgrade. </p> <p class="vspace" style="text-align: center;"><strong>We would like to take this opportunity to remind participants in the UK federation running the Shibboleth <span class="wikiword">IdP</span> to maintain and regularly update the software.</strong> </p> <p class="vspace">The following is the announcement from the Shibboleth project <strong>[4]</strong>; </p> <p class="vspace"><em>We do not have any specific knowledge that this vulnerability affects the <span class="wikiword">IdP</span> and a fair amount of insight that it may well not, but the Spring project hasn't corroborated our research by clearly pointing to the feature we think triggers the bug, so we're erring on the cautious side and just assuming we're vulnerable and believe deployers should do so as well. I've updated the security page</em> <strong><em>[3]</em></strong> <em>to reflect that assumption.</em> </p> <p class="vspace"><em>V4.2.0 is imminent but is a minor upgrade without a definite release date so waiting for it is not likely the best course for most.</em> </p> <p class="vspace"><strong>Note</strong>: if you are using the other SAML software or running the Shibboleth Service Provider you are not affected by this announcement, but you should still maintain software and update software in your control and/or work with your vendor or third-party support to determine if you maybe affected by any software vulnerabilities, including the recently announced Spring4Shell vulnerability <strong>[2]</strong> </p> <p class="vspace">If you are not already subscribed, please make sure you are signed up to the Shibboleth announce list <strong>[5]</strong> to receive these announcements direct from the Shibboleth project. </p> <p class="vspace">[1] <a class="urllink" href="http://web.archive.org/web/20221005222342/http://shibboleth.net/downloads/identity-provider/latest/" rel="nofollow">http://shibboleth.net/downloads/identity-provider/latest/</a><br clear="all"/> [2] <a class="urllink" href="http://web.archive.org/web/20221005222342/https://tanzu.vmware.com/security/cve-2022-22965" rel="nofollow">https://tanzu.vmware.com/security/cve-2022-22965</a> <br clear="all"/> [3]<a class="urllink" href="http://web.archive.org/web/20221005222342/https://shibboleth.atlassian.net/wiki/spaces/IDP4/pages/1265631889/SecurityAdvisories" rel="nofollow">https://shibboleth.atlassian.net/wiki/spaces/IDP4/pages/1265631889/SecurityAdvisories</a> <br clear="all"/> [4] <a class="urllink" href="http://web.archive.org/web/20221005222342/http://shibboleth.net/pipermail/announce/2022-March/000260.html" rel="nofollow">http://shibboleth.net/pipermail/announce/2022-March/000260.html</a> <br clear="all"/> [5] <a class="urllink" href="http://web.archive.org/web/20221005222342/https://shibboleth.net/mailman/listinfo/announce" rel="nofollow">https://shibboleth.net/mailman/listinfo/announce</a> <br clear="all"/> </p> <div class="vspace"></div></div> </div> <div id="footer" aria-label="footer"><p style="text-align: center;"> <a class="wikilink" href="http://web.archive.org/web/20221005222342/https://www.ukfederation.org.uk/content/Documents/AccessibilityStatement">Accessibility Statement</a> | <a class="wikilink" href="http://web.archive.org/web/20221005222342/https://www.ukfederation.org.uk/content/Documents/WebsiteInfo">Website Information</a><br clear="all"/><a class="wikilink" href="http://web.archive.org/web/20221005222342/https://www.ukfederation.org.uk/content/Documents/UKFederationHelpdesk">Helpdesk</a> | <a class="wikilink" href="http://web.archive.org/web/20221005222342/https://www.ukfederation.org.uk/content/Documents/CopyrightAndDisclaimer">© Jisc</a> </p> </div> </div> </div> </div> </div> </body> </html> <div id="wikitext"> </div>