Enabling federations

The connection for your application (accessed via the connections tab or the link on your application details below the name) is where you configure which federations Keystone is aware of.

At the bottom of the page are all the federations you can add - toggle the switches on or off and save to make the data available to Keystone. This does not add you to those federations - that is a function of the federation operators - see: How to join other federations.

The OpenAthens section covers the OpenAthens federation and our test federation. The Additional identity providers section is for manually adding individual IdPs that are not in a common federation. The rest are common federations around the world.

There are some information and status icons that can appear. In each case, hovering over them will reveal more detail.

There is a simple error check that will flag differences in the local and remote metadata. The check is very simplistic and things like formatting can occasionally produce false positives.