You are here

Where do I find the SAML metadata of the Identity Federations?

Please note: if you are administering a Service Provider, we recommend to use only 2 metadata sources:

If you do so, you can safely ignore all of the information below.

Identity Federation Official URL to SAML metadata about IdP(s) Website with details

SURFconext

The Netherlands
(See SURFconext particulars below this table.) ‘Get Conexted’    

DFN-AAI

Germany

https://www.aai.dfn.de/fileadmin/metadata/DFN-AAI-metadata.xml

https://www.aai.dfn.de/teilnahme/metadaten/

Haka

Finland

https://haka.funet.fi/metadata/haka-metadata.xml

https://confluence.csc.fi/x/9IIUAg

Kalmar Union

Nordic countries

https://kalmar2.org/simplesaml/module.php/aggregator/?id=kalmarcentral2&set=saml2

https://www.kalmar2.org/kalmar2web/tech_info.html

Belnet

Belgium

https://federation.belnet.be/federation-metadata.xml

http://federation.belnet.be/

eduID.cz

Czech Republic

https://metadata.eduid.cz/entities/eduid+idp

http://eduid.cz/en/tech/summary

RCTSaai

Portugal

https://rctsaai-rr.fccn.pt/rr/signedmetadata/federation/UkNUU2FhaQ~~/metadata.xml

https://confluence.fccn.pt/display/RCTSAAI/RCTSaai

CLARIN ERIC's own IdP

https://infra.clarin.eu/aai/prod_md_about_clarin_erics_idp.xml

‘CLARIN Identity Provider’

SURFconext particulars

The following is relevant to Dutch IdPs only (SURFconext).

  • To verify whether an SPF production SP is registered with SURFconext, access a URL of the form:
  • Because SURFconext is a hub-and-spoke federation only a subset of all Dutch Identity Providers has access to the SPF production SPs.
    • To view this subset, one can simply look over the Dutch IdPs in the CLARIN Discovery Service.
    • Alternatively, users that have an IdP within SURFconext can check these access rules here (requires login).
  • We have observed that SURFconext is releasing SAML2 attributes in both the urn:mace and the urn:oid namespaces. If you are mapping these attributes into the same server variable, you have to pay special attention to processing the multi value-server variable.