forum.sunet.se
This instruction describes the details needed for you to use your Skolfederation IdP to connect to Nätverk e-ID i Skolan and other networks that are hosted on forum.sunet.se.
Technical prerequisites
To be able to logon to forum.sunet.se from your IdP, your IdP must be uploaded to Skolfederation. forum.sunet.se is a service that originates from the Swedish Academic Identity Federation (SWAMID), and is available in Skolfederation via the interfederation FIDUS. Due to this exchange of services and IdP’s beyond Skolfederation, it may take up to 1 hr 30 min from your upload of IdP metadata to Skolfederation until you will be able to login to the service. If you have IdP metadata already uploaded in Skolfederation, this should not be an issue.
Scope
Your IdP metadata will need to have the Scope attribute set, as eduPersonPrincipalName (ePPN) is required by the service. For more information about Scope, click here.
Technical details
You will also need to set up trust in your IdP with the technical details below, and deliver the required attributes in the SAML assertion.
Service Provider Information
|
| Comment |
|---|---|---|
entityID |
| Is found in Skolfederation metadata. |
AssertionConsumerServiceURL (ACS-URL) |
| For use in IdP’s that do not support automatic SP configuration from metadata, i.e. G Suite IdP. |
Start-URL | For use in portals, links and so on. | |
Start-URL (logon initiation) | As above but a link that directly initiates the SAML login flow from the service. |
Attribute requirements
The following attributes are required in the SAML Assertion for a successful login.
Attribute | OID | Required? |
|---|---|---|
eduPersonPrincipalName |
| Yes |
displayName |
| Yes |
givenName |
| Yes |
sn |
| Yes |
| Yes |
For definitions of the attributes and their format, please find Skolfederations attribute profile here:
https://www.skolfederation.se/teknisk-information/attribut/
Help
If you’re having trouble configuring your IdP, talk to your IdP partner or consultant. They can help you in the best way configuring this service.
If you have other questions, please feel free to contact us at info@skolfederation.se.
Not a Skolfederation user organization (IdP)?
For access to the service if you are a service provider or another type of organization, you can use eduID. For more information, visit https://eduid.se/.