ShibIdPUpgrade

IdP software upgrade

If you are running IdP v1.3 or lower consider the following before upgrading to IdP software.

IdP v2.x is substantially different from 1.3 code base.

Customization

Did you customize IdP 1.3 in any way? Most installers have customized to some degree. If you did, do the same i 2.x

Post jsp, Error pages

IdP 1.3 used  idppost.jsp to post authn assertion to SP's, where as 2.x uses velocity templates. If you customized the post jsp, you will have to customize the velocity templates as well.

You will find the templates at ...

Customize and copy them to $IDP/webapps/WEB-INF/classes/templates. This will override the default templates that is bundled in the jar.

Authentication

It s different for each school. UCLA uses custom authentication service hosted by a different group in the campus. We used RemoteUSerAuthetication handler. If you are using LDAP or some other authn  consult Shibboleth wiki/forum.

handler.xml

h3 Convert ARP

in 2.x AFP replaces ARP. Schema is completely different. Handcoding/converting ARP to AFP is an arduous tasks if you have many AFPs. UCLA had 200+ custom release policies.
We developed a tool to convert the ARP to AFP.

h3 ePTID

Is any of your relying party dependent on ePTID? Implementation may be different in 2.x. Make sure same algorithm is used to generate ePTID.
At UCLA we took a chance and implemented new. Our 1.3 implem,entation was buggy. No one complained so far.

ePTID may be stored in a database. You don't eed to generate on the fly. WE thought it is an additioanl dependency. We chose to generate on the fly, at the expense of run time performace (which is negligible now a days)

* Discovery Service
* Session Clustering using Terracotta

* Develop tools to manage AFP & Metadata

The Work

* [Download and build the software|idp2build]
* [Integrate with UCLA SSO, Customize pages|idp2.ssointegration]
* [Convert ARP to 2.1 schema|idp2arp]
* [Integrate with Terracotta|idp2.terracotta]
* [Develop migration plan|idp2.migrationplan]
* [AFP and Metadata management tools|idp2.tools]
* Mavenize the project
* Use SVN for version control
* [Discovery Service|idp2.ds]
* [Testing|idp2Testing]
* [ARP and Metadata Changes|ARPMetadataChangesAfterJuly29]

The People

"IT": Datta Mahabalagiri
Warren Leung
Julia Feldmar
[Testers On or After 8/8/10|VolunteerTesters]

Schedule

* [Project schedule|idp2.schedule]