...
- It retrieves the eduGAIN IdPs from eduGAIN Operator Team database via a JSON interface.
For each IdP that it was not manually disabled by the eduGAIN Operations Team, the check creates a Wayfless URL for each SP involved and retrieves the IdP login page. It expects to find the HTML form with a username and password field. Therefore, no complete login will happen at the Identity Provider because the check stops at the login page. The SPs used for the check are "SP Demo" (https://sp-demo.idem.garr.it/shibboleth) from IDEM GARR AAI and the "AAI Viewer Interfederation Test" (https://attribute-viewer.aai.switch.ch/interfederation-test/shibboleth) from SWITCHaai. These SPs might change in the future if needed. The SAML authenticatin request is not signed. Therefore, authentication request for any eduGAIN SP could be created because the SP's private key is not needed.
Limitations
There are some situations where the check cannot work reliably. In those cases it is possible to disable the check for a particular IdP. The so far known cases where the check might generate a false negative are:
...
User-agent: ECCS Disallow: /
On-line interface
The eduGAIN Connectivity Check 2 test web pages is available at: https://technical-test.edugain.org/eccs2
The tool uses following status for IdPs:
| Status | Color | Description |
|---|---|---|
| ERROR | Red |
|
| OK | Green |
|
| DISABLED | White |
|
...
The eduGAIN Connectivity Check service 2 provides also a JSON feed on the monitoring results.
The table below describes the actions that can be performed by replacing "##ACTION##" in in the URL:
https://technical-test.edugain.org/eccs2/api/##ACTION##
...