Technical Profile - Cronologia

Malavolti@garr.it il 09:38, 16 apr 2026

2026-04-16T09:38:59Z

← Versione meno recente		Versione delle 11:38, 16 apr 2026
Riga 69:		Riga 69:
	\|1.2.1		\|1.2.1
	\|24-02-2026		\|24-02-2026
	\|IDP-MD02 – Changed entityID format to URL.		\|IDP-MD02, SP-MD02 – Changed entityID format to URL and removed the requirement to provide metadata via entityID URL.
	~~IDP-MD02, SP-MD02 – Removed~~ the requirement to provide metadata via entityID URL.

	IDP-FED02, IDP-FED03, SP-FED02, SP-FED03 – Added a recommendation for the web format (HTML) of informational and privacy policy pages.		IDP-FED02, IDP-FED03, SP-FED02, SP-FED03 – Added a recommendation for the web format (HTML) of informational and privacy policy pages.
	\|Marco Malavolti		\|Marco Malavolti
Riga 125:		Riga 123:

	====IDP-MD02 - entityID====		====IDP-MD02 - entityID====
	<code>entityID</code>, attribute defined in the element <code><md:EntityDescriptor></code>, MUST be a URL with a maximum length of 256 characters.		<code>entityID</code>, attribute defined in the element <code><md:EntityDescriptor></code>, MUST be a URL with a maximum length of 256 characters.

	''Example:''<syntaxhighlight lang="xml">		''Example:''<syntaxhighlight lang="xml">
Riga 419:		Riga 417:
	[[#top\|[TOP]]]		[[#top\|[TOP]]]
	====SP-MD02 - entityID====		====SP-MD02 - entityID====
	<code>entityID</code>, attribute defined in the element <code><md:EntityDescriptor></code>, MUST be a ~~URI~~ with a maximum length of 256 characters.		<code>entityID</code>, attribute defined in the element <code><md:EntityDescriptor></code>, MUST be a URL with a maximum length of 256 characters.


	''Example:''<syntaxhighlight lang="xml">		''Example:''<syntaxhighlight lang="xml">

Malavolti@garr.it il 16:26, 19 mar 2026

2026-03-19T16:26:01Z

← Versione meno recente		Versione delle 18:26, 19 mar 2026
Riga 356:		Riga 356:
	[[#top\|[TOP]]]		[[#top\|[TOP]]]

	=====IDP-FED06 - Validity Time=====		====IDP-FED06 - Validity Time====
	As a guideline for the duration of an authenticated user session, a minimum of 60 minutes and a maximum of 12 hours is RECOMMENDED.		As a guideline for the duration of an authenticated user session, a minimum of 60 minutes and a maximum of 12 hours is RECOMMENDED.

Malavolti@garr.it: /* IDP-FED05 - Requirements for Certificates used in Metadata */

2026-03-19T16:25:16Z

IDP-FED05 - Requirements for Certificates used in Metadata

← Versione meno recente		Versione delle 18:25, 19 mar 2026
Riga 356:		Riga 356:
	[[#top\|[TOP]]]		[[#top\|[TOP]]]

	===== IDP-FED06 - Validity Time =====		=====IDP-FED06 - Validity Time=====
	As a guideline for the duration of an authenticated user session, a minimum of 60 minutes and a maximum of 12 hours is RECOMMENDED.		As a guideline for the duration of an authenticated user session, a minimum of 60 minutes and a maximum of 12 hours is RECOMMENDED.

			[[#top\|[TOP]]]

	===Example of Identity Provider Metadata===		===Example of Identity Provider Metadata===

Malavolti@garr.it il 16:24, 19 mar 2026

2026-03-19T16:24:42Z

← Versione meno recente		Versione delle 18:24, 19 mar 2026
Riga 356:		Riga 356:
	[[#top\|[TOP]]]		[[#top\|[TOP]]]

	====== IDP-FED06 - Validity Time ======		===== IDP-FED06 - Validity Time =====
	As a guideline for the duration of an authenticated user session, a minimum of 60 minutes and a maximum of 12 hours is RECOMMENDED.		As a guideline for the duration of an authenticated user session, a minimum of 60 minutes and a maximum of 12 hours is RECOMMENDED.

Malavolti@garr.it il 16:24, 19 mar 2026

2026-03-19T16:24:19Z

← Versione meno recente		Versione delle 18:24, 19 mar 2026
Riga 1:		Riga 1:
	<big>Version 1.2.0</big>		<big>Version 1.2.2</big>

	<big>~~20 January~~ 2026</big>		<big>19 March 2026</big>

	===Revisions===		===Revisions===
Riga 79:		Riga 79:

	Calogero Costa		Calogero Costa
			\|-
			\|1.2.2
			\|19-03-2026
			\|Inclusion of the new requirements IDP-FED06 (Validity Time) and SP-MD09 (SingleLogoutService)
			\|Marco Malavolti
			Davide Vaghetti
	\|}		\|}

Riga 349:		Riga 355:

	[[#top\|[TOP]]]		[[#top\|[TOP]]]

			====== IDP-FED06 - Validity Time ======
			As a guideline for the duration of an authenticated user session, a minimum of 60 minutes and a maximum of 12 hours is RECOMMENDED.

	===Example of Identity Provider Metadata===		===Example of Identity Provider Metadata===
	<syntaxhighlight lang="xml">		<syntaxhighlight lang="xml">
Riga 510:		Riga 520:

	[[#top\|[TOP]]]		[[#top\|[TOP]]]
	====SP-MD09 - RequestedAttribute====		====SP-MD09 - SingleLogoutService====
			If the Service Provider implements Single Logout, the <code><md:SingleLogoutService></code> element MUST:

			*be defined with the attribute <code>Binding='<nowiki>urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect'</nowiki></code> (required by <code>LogoutRequest</code>);
			*always contain a <code>Location</code> attribute valued with a URL protected by SSL (<code>https://</code>).

			''Example:''<syntaxhighlight lang="xml">
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://..."/>

			</syntaxhighlight>[[#top\|[TOP]]]
			====SP-MD10 - RequestedAttribute====
	<code><md:RequestedAttribute></code> , defined in the element <code><md:AttributeConsumingService></code>, MUST:		<code><md:RequestedAttribute></code> , defined in the element <code><md:AttributeConsumingService></code>, MUST:

Riga 522:		Riga 542:

	</syntaxhighlight>[[#top\|[TOP]]]		</syntaxhighlight>[[#top\|[TOP]]]
	====SP-~~MD10~~ - OrganizationName====		====SP-MD11 - OrganizationName====
	<code><md:OrganizationName></code> , defined in the element <code><md:Organization></code>, MUST:		<code><md:OrganizationName></code> , defined in the element <code><md:Organization></code>, MUST:

Riga 537:		Riga 557:
	<md:OrganizationName xml:lang="it">Organizzazione di Esempio</md:OrganizationName>		<md:OrganizationName xml:lang="it">Organizzazione di Esempio</md:OrganizationName>
	</syntaxhighlight>[[#top\|[TOP]]]		</syntaxhighlight>[[#top\|[TOP]]]
	====SP-~~MD11~~ - OrganizationDisplayName====		====SP-MD12 - OrganizationDisplayName====
	<code><md:OrganizationDisplayName></code> , defined in the element <code><md:Organization></code>, MUST:		<code><md:OrganizationDisplayName></code> , defined in the element <code><md:Organization></code>, MUST:

Riga 552:		Riga 572:
	<md:OrganizationDisplayName xml:lang="it">Risorsa erogata da Università di Esempio</md:OrganizationDisplayName>		<md:OrganizationDisplayName xml:lang="it">Risorsa erogata da Università di Esempio</md:OrganizationDisplayName>
	</syntaxhighlight>[[#top\|[TOP]]]		</syntaxhighlight>[[#top\|[TOP]]]
	====SP-~~MD12~~ - OrganizationURL====		====SP-MD13 - OrganizationURL====
	<code><md:OrganizationURL></code>, defined in the element <code><md:Organization></code>, MUST:		<code><md:OrganizationURL></code>, defined in the element <code><md:Organization></code>, MUST:

Riga 566:		Riga 586:
	<md:OrganizationURL xml:lang="it">https://...sito istituzionalein italiano...</md:OrganizationURL>		<md:OrganizationURL xml:lang="it">https://...sito istituzionalein italiano...</md:OrganizationURL>
	</syntaxhighlight>[[#top\|[TOP]]]		</syntaxhighlight>[[#top\|[TOP]]]
	====SP-~~MD13~~ - ContactPerson====		====SP-MD14 - ContactPerson====
	The metadata of the entity MUST define <u>at least</u> one <code><md:ContactPerson></code> element with the following requirements:		The metadata of the entity MUST define <u>at least</u> one <code><md:ContactPerson></code> element with the following requirements:

Malavolti@garr.it il 10:58, 24 feb 2026

2026-02-24T10:58:43Z

← Versione meno recente		Versione delle 12:58, 24 feb 2026
Riga 66:		Riga 66:
	\|Marco Malavolti		\|Marco Malavolti
	Mario Di Lorenzo		Mario Di Lorenzo
			\|-
			\|1.2.1
			\|24-02-2026
			\|IDP-MD02 – Changed entityID format to URL.
			IDP-MD02, SP-MD02 – Removed the requirement to provide metadata via entityID URL.

			IDP-FED02, IDP-FED03, SP-FED02, SP-FED03 – Added a recommendation for the web format (HTML) of informational and privacy policy pages.
			\|Marco Malavolti
			Davide Vaghetti

			Mario Di Lorenzo

			Calogero Costa
	\|}		\|}

Riga 106:		Riga 119:

	====IDP-MD02 - entityID====		====IDP-MD02 - entityID====
	<code>entityID</code>, attribute defined in the element <code><md:EntityDescriptor></code>, MUST be a ~~URI~~ with a maximum length of 256 characters.		<code>entityID</code>, attribute defined in the element <code><md:EntityDescriptor></code>, MUST be a URL with a maximum length of 256 characters.

	~~If the entityID URI is a URL it SHOULD return the entity metadata~~.

	''Example:''<syntaxhighlight lang="xml">		''Example:''<syntaxhighlight lang="xml">
Riga 300:		Riga 311:
	#a reference/pointer to the user support service (for example: an email address, a web page, a web form, etc)		#a reference/pointer to the user support service (for example: an email address, a web page, a web form, etc)
	#a pointer to the page about the processing of personal data as indicated by <code><mdui:PrivacyStatementURL></code> ([[Technical Profile#IDP-MD07 - PrivacyStatementURL\|IDP-MD07]])		#a pointer to the page about the processing of personal data as indicated by <code><mdui:PrivacyStatementURL></code> ([[Technical Profile#IDP-MD07 - PrivacyStatementURL\|IDP-MD07]])
			It is RECOMMENDED to use a format that is accessible and directly navigable via a web browser.

	A Web page for Information to the users MAY include the IDEM Logo and a link to the IDEM Web site:		A Web page for Information to the users MAY include the IDEM Logo and a link to the IDEM Web site:
Riga 311:		Riga 323:

	As a useful example of document about the processing of personal data, IDEM GARR AAI team has provided a template available in:[[InformativaDatiPersonaliIdP\|InformativaDatiPersonaliIdP.]]		As a useful example of document about the processing of personal data, IDEM GARR AAI team has provided a template available in:[[InformativaDatiPersonaliIdP\|InformativaDatiPersonaliIdP.]]

			It is RECOMMENDED to use a format that is accessible and directly navigable via a web browser.

	[[#top\|[TOP]]]		[[#top\|[TOP]]]
Riga 395:		Riga 409:
	<code>entityID</code>, attribute defined in the element <code><md:EntityDescriptor></code>, MUST be a URI with a maximum length of 256 characters.		<code>entityID</code>, attribute defined in the element <code><md:EntityDescriptor></code>, MUST be a URI with a maximum length of 256 characters.

	~~If the entityID URI is a URL it SHOULD return the entity metadata.~~

	''Example:''<syntaxhighlight lang="xml">		''Example:''<syntaxhighlight lang="xml">
Riga 590:		Riga 603:
	#a reference/pointer to the page about the processing of personal data as indicated by <code><mdui:PrivacyStatementURL></code> ([[Technical Profile#SP-MD06 - PrivacyStatementURL\|SP-MD06]]), if possible, referenced with the same URL.		#a reference/pointer to the page about the processing of personal data as indicated by <code><mdui:PrivacyStatementURL></code> ([[Technical Profile#SP-MD06 - PrivacyStatementURL\|SP-MD06]]), if possible, referenced with the same URL.

	It is RECOMMENDED to ~~publish~~ also the Italian ~~version of the~~ web ~~page~~.		It is RECOMMENDED to also provide the version in Italian and to use a format that is accessible and directly navigable via a web browser.

	[[#top\|[TOP]]]		[[#top\|[TOP]]]
Riga 605:		Riga 618:
	* the manner in which data subjects may exercise their rights.		* the manner in which data subjects may exercise their rights.

			It is RECOMMENDED to use the guidelines distributed by REFEDS in a format that is accessible and directly navigable via a web browser:
	It is ~~strongly suggested~~ to use REFEDS ~~guidelines for Service Provider~~:

	https://wiki.refeds.org/display/CODE/Privacy+policy+guidelines+for+Service+Providers		https://wiki.refeds.org/display/CODE/Privacy+policy+guidelines+for+Service+Providers

Malavolti@garr.it il 15:21, 20 gen 2026

2026-01-20T15:21:40Z

Mostra modifiche

Malavolti@garr.it il 09:54, 12 giu 2024

2024-06-12T09:54:34Z

← Versione meno recente		Versione delle 11:54, 12 giu 2024
Riga 578:		Riga 578:
	*a reference/pointer to the page about the Information to the users ([[Technical Profile#SP-MD05 - InformationURL\|SP-MD05]])		*a reference/pointer to the page about the Information to the users ([[Technical Profile#SP-MD05 - InformationURL\|SP-MD05]])

	It is strongly suggested to follow ''REFEDS Best Practices'' when implementing federated access to a resource'':'' https://discovery.refeds.org/		<!-- It is strongly suggested to follow ''REFEDS Best Practices'' when implementing federated access to a resource'':'' https://discovery.refeds.org/ -->

	[[#top\|[TOP]]]		[[#top\|[TOP]]]

Malavolti@garr.it il 12:14, 22 gen 2024

2024-01-22T12:14:00Z

← Versione meno recente		Versione delle 14:14, 22 gen 2024
Riga 50:		Riga 50:
	SP-MD03, SP-MD04 - Added ServiceName and ServiceDescription checked elements		SP-MD03, SP-MD04 - Added ServiceName and ServiceDescription checked elements
	\|Marco Malavolti		\|Marco Malavolti
			Barbara Monticini

			Davide Vaghetti

			Mario Di Lorenzo
	\|}		\|}

Malavolti@garr.it il 15:52, 19 gen 2024

2024-01-19T15:52:07Z

← Versione meno recente		Versione delle 17:52, 19 gen 2024
Riga 47:		Riga 47:

	SP-FED02 - Added reference to the service provider’s Privacy Policy		SP-FED02 - Added reference to the service provider’s Privacy Policy

			SP-MD03, SP-MD04 - Added ServiceName and ServiceDescription checked elements
	\|Marco Malavolti		\|Marco Malavolti
	\|}		\|}