Welcome
Welcome to the I-Trust Federation Registry. Here you can view, manage and report on the Organizations, Identity Providers and Service Providers which make up the federation.
Are you already able to login to I-Trust connected services?
Not yet :(
You can create your service provider with the federation below without needing to login. Once you submit your details we'll be in touch, easy.
Create a Service Provider
Problems logging on?
Here are some common things you might need to configure at your Identity Provider in order to successfully login.
1. Metadata
Ensure you've correctly configured I-Trust metadata for use with your Identity Provider. Double check by taking a look at this guide http://support.aaf.edu.au/entries/338216-three-versions-of-the-aaf-metadata-available.
2. Time Synchronization
Ensure your Identity Provider server is synced to an upstream time server, this is critically important for federated authentication.
3. Required Attributes
In order to get access to the Federation Registry, you need an account provided by an Identity Provider that is active within the federation. Your Identity Provider must be configured to release the following attributes to this service.
- givenName and SN, or alternatively displayName
- mail
- eduPersonTargetedID or eduPersonPrincipalName
Within the federation we recommend automating this process by consuming a registry-generated attribute filter file into your IDP. For details, contact the I-Trust Federation managers at itrust-mgr@illinois.edu.
