...
| Table of Contents |
|---|
...
Introduction
From time to time, certificates on services are changed as they expire, or security improvements are made.
...
It is recommended to have an additional non-production-use namespace configured with user directory for Suomi.fi-tunnistus. This allows for completely safe testing, validation, and verification in production without the risk of breaking the production namespace(s).
Process
Typically this change process is straightforward, but when it also affects production, one has to be vary careful, and be prepared for a roll-back. How roll-back is done, is described below.
Sign-in to TIS as platform manager
You need to have Platfrom Manager or Platform Administrator role to be able to execute this change. At the minimum, you need permissions to modify user directories in all namespaces.
After sign-in, locate suomi.fi-tunnistus user direcotory in all namespaces. Typically there are only few. Picture below shows an example. Term “suomi.fi” is most often found in the display name.
...
Prepare files
Read carefully instructions from DVV on the change, and note the relevant dates. Download the new metadata XML file and store it locally. Name it so you know it is it for test or for production, and it is the new metadata you want to use from now on.
Backup the current metadata for possible roll-back
Just in case you need to roll-back to the current version of metadata, please save it locally. Again, when saving it, make note in the filename if it is test or production, and it is the metadata currently in use.
...
Just select the text in field “IdP metadata XML”, copy it to clipboard, and save is to a text editor. (Hint: Select the metadata so you have a flashing cursor there, then select Ctrl+A to select it all, and finally Ctrl-C to copy it to clipboard, finally paste it to text editor with Ctrl-V.)
Replace current metadata with new one
Clear off the current metadata so the field “IdP metadata XML” is empty.
Copy to clipboard the new metadata on text editor.
Paste new metadata to the field “IdP metadata XML”. If there is a problem with the metadata, the field will turn to red and there will be and error message. You should Revert to previous configuration, and not to save changes, and that will break the user directory.
Select “Save” at the top-right on the user directory editor. Then select “Close”.
New metadata is activated immediately when it is saved.
Verify it is working
How the verification is done varies tremendously. This is why we will only show one way to do it.
...
Select that link, and verify suomi.fi-tunnistus works as it should.
Additional external information
This is all in Finnish (external links, verified working when last edited this page)..
...