HarvardKey Shibboleth Identity Provider (IdP) Upgrade Dry-run

Date and Time

November 12, 2024
07:00AM - 08:00AM EST

The IAM Authentication & Authorization Services Team will upgrade HarvardKey’s Shibboleth Identity Provider (IdP) on Tuesday, November 19th from 7am to 8am. To prepare, we are conducting a test run on Tuesday, November 12th from 7am to 8am. Your participation in testing is essential to ensure a seamless transition.

What is Changing?

  • HarvardKey’s Shibboleth IdP will be upgraded to enhance security and apply critical bug fixes.

Impact

  • We expect no interruption to HarvardKey authentication, as the upgrade uses a DNS change.

Action Items for Application Owners

Please read and take the following actions to help us ensure a smooth transition:

  1. Test-Run on November 12th, 7:00am - 8:00am

    • During this window, we will temporarily switch to the upgraded Shibboleth IdP version. Please log in to your applications and confirm they are working as expected.

    • If you encounter any issues, join us on our Zoom conference bridge (Details were emailed to IAM-Auth-Services mailing list) or post in #iam-public on Harvard Enterprise Slack to report

  2. Final Upgrade on November 19th, 7:00am - 8:00am

    • This will be the permanent switch. As with the test-run, we ask that you promptly report any issues during the change window using the Zoom conference bridge (Details were emailed to IAM-Auth-Services mailing list) or following the change window by emailing iam_help@harvard.edu or post in #iam-public on Harvard Enterprise Slack.

Change Freeze for HarvardKey SAML Registrations (11/12 - 11/19)

To streamline configuration management across Shibboleth versions, IAM will implement a change freeze for SAML registrations from the test run on 11/12 until the production release on 11/19. New registrations and updates to existing SAML registrations will resume on the regular weekly schedule after this release.

 

Thank you for your collaboration in ensuring a successful upgrade! Please don’t hesitate to reach out via Slack or at iam_help@harvard.edu  if you have any questions.