SWITCHaai: 1’000 services registered

Last week, the number of services registered in the SWITCHaai federation crossed the 1’000 line for the first time.

When the Università della Svizzera italiana, Damiano Bianchi (Servizio informatico TI-EDU) registered the ‘USI Library service’ (the 21st service of USI), this new service became the 1’000th SP available in the SWITCHaai federation.

It’s the first time in the history of SWITCHaai that we have reached this number of registered SPs. Due to old services getting deleted and new ones registered, the actual number of services slightly fluctuates. However, in general it has been steadily increasing since the production SWITCHaai service was launched 12 years ago in autumn 2005 (see the graph in the lower right corner in the growth picture below).

201706 SWITCHaai Status

The steady growth of the SWITCHaai Federation

The SWITCHaai federation serves the higher education community in Switzerland and Liechtenstein: More than 99% of all students, staff members and researchers at universities, universities of applied sciences and teacher education universities have a SWITCHaai-enabled user account. With their account, they can access a wide variety of services. Users as well as service administrators enjoy the benefit of no service specific user accounts required!

In addition, more than 100’000 further users from about 20 university related institutions have user accounts that provide them also access via SWITCHaai.

SWITCH and the SWITCHaai federation participate in the development and use of eduGAIN, the GÉANT interfederation service that interconnects more than 40 federations world-wide.


SWITCHaai Transition to Shibboleth Identity Provider v3 is 80% complete

Back in May 2015, the Shibboleth Consortium announced July 31st 2016 as end-of-life date for the IdPv2 code base. A redesigned IdPv3.1.1 is available since March 2015. One month later, SWITCH announced the initial version of the SWITCHaai specific IdPv3 installation guide. In June and September 2015, SWITCH offered well-attended IdP training courses [4] on how to configure IdPv3. Since then, the number of IdPv3 installations has gradually increased to the 80% level it reached just at the beginning of the autumn semester 2016.

The vast majority of the IdP administrators have installed, configured, tested and finally integrated the new version into their production environment. A big thank you to all of them that they gave their time to upgrade. Many administrators provided us valuable feedback on the IdP installation guide so that we could continuously improve it over time.
Several organizations decided to adopt the IdP Hosting service SWITCH offers instead of upgrading their own local installation. Today, SWITCH runs 17 production IdPs on our IdP hosting platform, including the ones for Swiss edu-ID, the Virtual Home Organization (VHO) and the IdP for the SWITCH staff members.

From about half of the remaining eleven IdPv2 instances we know that they will migrate to IdPv3 in the next few weeks. So hopefully by the end of 2016 almost everyone will have completed the transition.

The US InCommon Federation from time to time analyses the metadata of the eduGAIN interfederation service and publishes an interesting statistic on how many of the interfederation enabled IdPs are based on the Shibboleth open source software and run on IdPv3 or still on IdPv2. These numbers show that the percentage of IdPv3 in SWITCHaai is pretty high compared with most other federations listed.


10 Years SWITCHaai

In autumn 2005, SWITCH launched the production service for the SWITCHaai federation. Now more than 400’000 users from 60 institutions have a SWITCHaai enabled account that allows them to access their choice of more than 800 SWITCHaai enabled services.

SWITCHaai Status Oct 2015

10 Years SWITCHaai Federation (2005-2015)

The usage of SWITCHaai is still increasing. Over the last 12 months, an average of 50 logins per minute were counted on the central discovery service, a growth of 6% compared to the prior period.

40% of Identity Providers are now interfederation ready, serving more than 70% of all AAI-enabled users. In early 2016, the US InCommon Federation will also widely deploy interfederation via the interfederation service eduGAIN. The number of users able to access services registered in another federation is constantly growing, which attracts even more services. Currently, however, only nine out of the more than 800 SWITCHaai enabled services accept users from other federations.

Since the end of November, there are no longer any SAML1-only Service Providers registered in the SWITCHaai Federation. Now that the SAML2 standard is 10 years old, it is time to get rid of the last few services that still default to using SAML1 even though they also support SAML2.