Write EB migration guide for app admins #2454

Open
opened 2026-06-16 14:36:32 +00:00 by EricvanSchaik · 4 comments
EricvanSchaik commented 2026-06-16 14:36:32 +00:00 (Migrated from github.com)

Migrate a test application from eduTEAMS to EB, and write down all the needed steps for communication with app admins.

Environment setup: EB test2 <- SBS test -> eduTEAMS acc

As part of the migration, we want our app admins to use the Manage self service capability of SRAM to add their apps to Manage.

Migrate a test application from eduTEAMS to EB, and write down all the needed steps for communication with app admins. Environment setup: EB test2 <- SBS test -> eduTEAMS acc As part of the migration, we want our app admins to use the Manage self service capability of SRAM to add their apps to Manage.
EricvanSchaik commented 2026-06-24 10:05:04 +00:00 (Migrated from github.com)

@mrvanes built a simple test rp / sp (https://test-rp.sram.lab.surf.nl/), we are now waiting on eduTEAMS for them to add it to their acc instance. After that, we will try to migrate that in our SBS acc environment from the eduTEAMS acc instance to the EB test instance. For that, we need to deploy the midproxy in the EB test environment (part of https://github.com/OpenConext/OpenConext-deploy/pull/634), and configure in Manage that that midproxy is the only IdP for our test applications. Also, we need to add credentials to the EB deployment configuration, so that it can access the SBS acc instance with an API username and password (and deploy EB with that change ofc).

@mrvanes built a simple test rp / sp (https://test-rp.sram.lab.surf.nl/), we are now waiting on eduTEAMS for them to add it to their acc instance. After that, we will try to migrate that in our SBS acc environment from the eduTEAMS acc instance to the EB test instance. For that, we need to deploy the midproxy in the EB test environment (part of https://github.com/OpenConext/OpenConext-deploy/pull/634), and configure in Manage that that midproxy is the only IdP for our test applications. Also, we need to add credentials to the EB deployment configuration, so that it can access the SBS acc instance with an API username and password (and deploy EB with that change ofc).
EricvanSchaik commented 2026-06-25 11:55:35 +00:00 (Migrated from github.com)

After realizing that this process could interfere with external users using our acc environment (we need to open some gates to EB to fully test this flow, external users could theoretically also use these dates while we don't want them yet), we decided that SBS acc -> EB test isn't going to work. We decided that it would be better to set it up with SBS test talking to EB test2 and eduTEAMS acc. To make our test sp / rp available in our SBS test environment, we need to ask eduTEAMS again to enable that for use, because their acc instance makes a distinction between our acc and test environment using their vo attributes.

After realizing that this process could interfere with external users using our acc environment (we need to open some gates to EB to fully test this flow, external users could theoretically also use these dates while we don't want them yet), we decided that SBS acc -> EB test isn't going to work. We decided that it would be better to set it up with SBS test talking to EB test2 and eduTEAMS acc. To make our test sp / rp available in our SBS test environment, we need to ask eduTEAMS again to enable that for use, because their acc instance makes a distinction between our acc and test environment using their vo attributes.
logan-life commented 2026-07-07 12:56:53 +00:00 (Migrated from github.com)

We would like to have a transition period of ~3 months for app owners.

If we start the migration support effort on September 1st that means we get September, October, and November to help all app owners migrate.

Then we have the first couple weeks of December to flip the big switches over to the new setup.

That means that it would be good to have this guide ready for review in mid-august.

We would like to have a transition period of ~3 months for app owners. If we start the migration support effort on September 1st that means we get September, October, and November to help all app owners migrate. Then we have the first couple weeks of December to flip the big switches over to the new setup. That means that it would be good to have this guide ready for review in mid-august.
EricvanSchaik commented 2026-07-16 13:55:13 +00:00 (Migrated from github.com)
Image
<img width="3371" height="1413" alt="Image" src="https://github.com/user-attachments/assets/fc7b4cb0-8c6b-403e-abe8-cf5d5588ab84" />
Sign in to join this conversation.
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
eric/SBS#2454
No description provided.