{"id":23271,"date":"2021-03-25T13:46:00","date_gmt":"2021-03-25T17:46:00","guid":{"rendered":"https:\/\/canarie.machinedev.ca\/?post_type=document&#038;p=23271"},"modified":"2024-11-29T13:11:57","modified_gmt":"2024-11-29T18:11:57","slug":"shibboleth-v4-upgrade-guidance","status":"publish","type":"document","link":"https:\/\/www.canarie.ca\/fr\/document\/shibboleth-v4-upgrade-guidance\/","title":{"rendered":"FCA \u2013 Mise \u00e0 niveau de Shibboleth"},"content":{"rendered":"\n<p class=\"has-text-align-left\">Mise \u00e0 jour mai 2024<\/p>\n\n\n\n<p>Garder le logiciel de votre fournisseur d\u2019identit\u00e9s (IdP) \u00e0 jour est capital pour la s\u00e9curit\u00e9 de l\u2019organisation et le maintien de son attestation <strong>Security Incident Response Trust Framework for Federated Identity<\/strong> <a href=\"https:\/\/www.canarie.ca\/fr\/identite\/gfi\/sirtfi\/\" target=\"_blank\" rel=\"noreferrer noopener\">(SIRTFI<\/a>) dans le milieu de la recherche et de l\u2019\u00e9ducation (R-E).<\/p>\n\n\n\n<p>Consultez le guide de la FCA sur les <a href=\"https:\/\/www.canarie.ca\/fr\/document\/logiciel-idp-recommande\/\">logiciels IdP recommand\u00e9s<\/a> et le <a href=\"https:\/\/shibboleth.atlassian.net\/wiki\/spaces\/IDP5\/pages\/3199500925\/Upgrading\">guide sur la mise \u00e0 niveau du logiciel IdP<\/a> du Consortium Shibboleth (en anglais)..<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Pour commencer&nbsp;<\/h2>\n\n\n\n<section class=\"section section--text-columns no-background\">\n    <div class=\"grid-container\">\n      <div class=\"grid-x grid-padding-x\">\n        <div class=\"cell\">\n                  \t<h3>Examinez et \u00e9valuez votre feuille de route technique <\/h3>\n                    <p>Une mise \u00e0 niveau est aussi une excellente occasion de faire le point pour d\u00e9terminer s\u2019il vaudrait la peine d\u2019ajouter des fonctionnalit\u00e9s au fournisseur d\u2019identit\u00e9s.<\/p>\n<p>Vous pourriez\u00a0:<\/p>\n<ul>\n<li>dresser la liste des probl\u00e8mes ou des lacunes auxquels vous aimeriez rem\u00e9dier;<\/li>\n<li>passer en revue de nouvelles fonctionnalit\u00e9s, par exemple\u00a0:\n<ul>\n<li>les autorisations multifactorielles (MFA);<\/li>\n<li>la procuration \u00e0 une autre plateforme d\u2019infonuagique;<\/li>\n<li>l\u2019adoption de m\u00e9thodes d\u2019authentification plus rigoureuses comme Passkeys;<\/li>\n<li>l\u2019\u00e9valuation des besoins concernant l\u2019usage de protocoles multiples.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<p>Une fois cette \u00e9valuation termin\u00e9e, examinez la version la plus r\u00e9cente du <a href=\"https:\/\/shibboleth.atlassian.net\/wiki\/spaces\/IDP5\/pages\/3199500925\/Upgrading\">guide sur les mises \u00e0 niveau de l\u2019IdP Shibboleth<\/a> (en anglais). Si vous d\u00e9cidez d\u2019aller de l\u2019avant avec la mise \u00e0 niveau, suivez les conseils ci-dessous.<\/p>\n                  <\/div>\n      <\/div>\n    <\/div>\n  <\/section>\n\n\n<div style=\"height:36px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 class=\"wp-block-heading\">Consid\u00e9rations<\/h2>\n\n\n\n<section class=\"section section--text-columns no-background\">\n    <div class=\"grid-container\">\n      <div class=\"grid-x grid-padding-x\">\n        <div class=\"cell\">\n                  \t<h3>La stabilit\u00e9 avant la nouveaut\u00e9<\/h3>\n                    <p>Il est plus facile de maintenir la stabilit\u00e9 en apportant des changements petit \u00e0 petit. Divisez les modifications de grande envergure ou complexes en \u00e9tapes et v\u00e9rifiez chacune avant de passer \u00e0 la suivante.<\/p>\n<p>Cette m\u00e9thode s\u2019av\u00e8re particuli\u00e8rement utile pour \u00e9viter les probl\u00e8mes quand les changements pr\u00e9voient ce qui suit\u00a0:<\/p>\n<ul>\n<li>passer d\u2019un syst\u00e8me d\u2019exploitation \u00e0 un autre;<\/li>\n<li>mettre la version de Java \u00e0 jour;<\/li>\n<li>abandonner les machines virtuelles pour la conteneurisation;<\/li>\n<li>ajouter une machine \u00e0 la grappe IdP;<\/li>\n<li>apporter des modifications majeures au syst\u00e8me d\u2019exploitation ou au serveur Web.<\/li>\n<\/ul>\n                  <\/div>\n      <\/div>\n    <\/div>\n  <\/section>\n\n\n<div style=\"height:36px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 class=\"wp-block-heading\">Prochaines \u00e9tapes<\/h2>\n\n\n\n<section class=\"section section--text-columns no-background\">\n    <div class=\"grid-container\">\n      <div class=\"grid-x grid-padding-x\">\n        <div class=\"cell\">\n                  \t<h3>Pratiques utiles<\/h3>\n                    <p>Vous <u>devrez<\/u> avoir mis \u00e0 niveau l\u2019IdP de Shibboleth sur la machine existante ou, de pr\u00e9f\u00e9rence, sur un clone ou un banc d\u2019essai qui la reproduit pour que les modifications s\u2019effectuent \u00e0 l\u2019\u00e9cart des op\u00e9rations jusqu\u2019au moment o\u00f9 on d\u00e9cidera de proc\u00e9der \u00e0 la permutation. De cette fa\u00e7on, l\u2019administrateur de l\u2019IdP pourra attribuer le nom DNS au nouvel environnement \u00e0 sa discr\u00e9tion.<\/p>\n<p>Si on donne un nouveau nom au service, il ne s\u2019agira pas d\u2019une mise \u00e0 niveau mais bien d\u2019une installation.<\/p>\n<hr \/>\n<p><strong>Copier tous les fichiers d\u2019une ancienne version de l\u2019IdP sur la nouvelle ne donnera pas de bons r\u00e9sultats.<\/strong><\/p>\n<hr \/>\n<p>Voici d\u2019autres points \u00e0 prendre en consid\u00e9ration pour une mise \u00e0 niveau plus facile.<\/p>\n<ul>\n<li><strong>\u00c9vitez de changer votre entityID<\/strong>.\n<ul>\n<li>Vous ne pourrez effectuer les essais directement et le logiciel signalera une nouvelle installation plut\u00f4t qu\u2019une mise \u00e0 niveau.<\/li>\n<\/ul>\n<\/li>\n<li><strong>Passez \u00e0 la version de Java la plus r\u00e9cente que supporte le logiciel avant de commencer.<\/strong><\/li>\n<li><strong>Mettez les modules d\u2019extension \u00e0 jour avant de d\u00e9buter.<\/strong><\/li>\n<li><strong>Assurez-vous que les cl\u00e9s SAML de signature et d\u2019encryptage sont pr\u00e9serv\u00e9es entre l\u2019ancienne version et la mise \u00e0 niveau.<\/strong><\/li>\n<li><strong>Pr\u00e9servez les grains de sel secrets sp\u00e9ciaux employ\u00e9s pour \u00e9tablir une identit\u00e9 unique.<\/strong>\n<ul>\n<li>On utilise cette valeur pour \u00e9tablir cr\u00e9er identifiants persistants uniques et ces derniers doivent \u00eatre calcul\u00e9s de fa\u00e7on identique \u00e0 chaque mise \u00e0 niveau.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n                  <\/div>\n      <\/div>\n    <\/div>\n  <\/section>\n\n\n<div style=\"height:46px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<section class=\"section section--text-columns no-background\">\n    <div class=\"grid-container\">\n      <div class=\"grid-x grid-padding-x\">\n        <div class=\"cell\">\n                  \t<h3>La m\u00e9thode de la mise \u00e0 niveau uniforme<\/h3>\n                    <p>On pourra v\u00e9rifier l\u2019environnement de pr\u00e9production apr\u00e8s la mise \u00e0 niveau sur un h\u00f4te local r\u00e9serv\u00e9 \u00e0 votre usage ou \u00e0 celui des testeurs. De cette mani\u00e8re, on pourra v\u00e9rifier les environnements de production et de pr\u00e9production c\u00f4te \u00e0 c\u00f4te et revenir \u00e0 un stade connu si des probl\u00e8mes surgissent. La mise \u00e0 niveau sera aussi transparente pour la FCA, vos utilisateurs et les fournisseurs de services avec lesquels vous faites affaire.<\/p>\n<p>&nbsp;<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-43315 size-full\" src=\"https:\/\/www.canarie.ca\/wp-content\/uploads\/2021\/03\/Production-IdP-2.png\" alt=\"\" width=\"1769\" height=\"629\" srcset=\"https:\/\/www.canarie.ca\/wp-content\/uploads\/2021\/03\/Production-IdP-2.png 1769w, https:\/\/www.canarie.ca\/wp-content\/uploads\/2021\/03\/Production-IdP-2-300x107.png 300w, https:\/\/www.canarie.ca\/wp-content\/uploads\/2021\/03\/Production-IdP-2-1024x364.png 1024w, https:\/\/www.canarie.ca\/wp-content\/uploads\/2021\/03\/Production-IdP-2-768x273.png 768w, https:\/\/www.canarie.ca\/wp-content\/uploads\/2021\/03\/Production-IdP-2-1536x546.png 1536w\" sizes=\"auto, (max-width: 1769px) 100vw, 1769px\" \/><\/p>\n<p>&nbsp;<\/p>\n                  <\/div>\n      <\/div>\n    <\/div>\n  <\/section>","protected":false},"featured_media":20431,"parent":0,"template":"","program":[137],"document_type":[225,195],"class_list":["post-23271","document","type-document","status-publish","has-post-thumbnail","hentry","program-fca","document_type-bulletins-gfi","document_type-soutien-technique"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.4 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>FCA \u2013 Mise \u00e0 niveau de Shibboleth - CANARIE<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.canarie.ca\/fr\/document\/shibboleth-v4-upgrade-guidance\/\" \/>\n<meta property=\"og:locale\" content=\"fr_FR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"FCA \u2013 Mise \u00e0 niveau de Shibboleth - CANARIE\" \/>\n<meta property=\"og:description\" content=\"Mise \u00e0 jour mai 2024 Garder le logiciel de votre fournisseur d\u2019identit\u00e9s (IdP) \u00e0 jour est capital pour la s\u00e9curit\u00e9 [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.canarie.ca\/fr\/document\/shibboleth-v4-upgrade-guidance\/\" \/>\n<meta property=\"og:site_name\" content=\"CANARIE\" \/>\n<meta property=\"article:modified_time\" content=\"2024-11-29T18:11:57+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.canarie.ca\/wp-content\/uploads\/2018\/02\/news_FIM.png\" \/>\n\t<meta property=\"og:image:width\" content=\"800\" \/>\n\t<meta property=\"og:image:height\" content=\"405\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.canarie.ca\\\/fr\\\/document\\\/shibboleth-v4-upgrade-guidance\\\/\",\"url\":\"https:\\\/\\\/www.canarie.ca\\\/fr\\\/document\\\/shibboleth-v4-upgrade-guidance\\\/\",\"name\":\"FCA \u2013 Mise \u00e0 niveau de Shibboleth - CANARIE\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.canarie.ca\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.canarie.ca\\\/fr\\\/document\\\/shibboleth-v4-upgrade-guidance\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.canarie.ca\\\/fr\\\/document\\\/shibboleth-v4-upgrade-guidance\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.canarie.ca\\\/wp-content\\\/uploads\\\/2018\\\/02\\\/news_FIM.png\",\"datePublished\":\"2021-03-25T17:46:00+00:00\",\"dateModified\":\"2024-11-29T18:11:57+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.canarie.ca\\\/fr\\\/document\\\/shibboleth-v4-upgrade-guidance\\\/#breadcrumb\"},\"inLanguage\":\"fr-FR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.canarie.ca\\\/fr\\\/document\\\/shibboleth-v4-upgrade-guidance\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\\\/\\\/www.canarie.ca\\\/fr\\\/document\\\/shibboleth-v4-upgrade-guidance\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.canarie.ca\\\/wp-content\\\/uploads\\\/2018\\\/02\\\/news_FIM.png\",\"contentUrl\":\"https:\\\/\\\/www.canarie.ca\\\/wp-content\\\/uploads\\\/2018\\\/02\\\/news_FIM.png\",\"width\":800,\"height\":405,\"caption\":\"caf fim\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.canarie.ca\\\/fr\\\/document\\\/shibboleth-v4-upgrade-guidance\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\\\/\\\/www.canarie.ca\\\/fr\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"FCA \u2013 Mise \u00e0 niveau de Shibboleth\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.canarie.ca\\\/#website\",\"url\":\"https:\\\/\\\/www.canarie.ca\\\/\",\"name\":\"CANARIE\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.canarie.ca\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"fr-FR\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"FCA \u2013 Mise \u00e0 niveau de Shibboleth - CANARIE","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.canarie.ca\/fr\/document\/shibboleth-v4-upgrade-guidance\/","og_locale":"fr_FR","og_type":"article","og_title":"FCA \u2013 Mise \u00e0 niveau de Shibboleth - CANARIE","og_description":"Mise \u00e0 jour mai 2024 Garder le logiciel de votre fournisseur d\u2019identit\u00e9s (IdP) \u00e0 jour est capital pour la s\u00e9curit\u00e9 [&hellip;]","og_url":"https:\/\/www.canarie.ca\/fr\/document\/shibboleth-v4-upgrade-guidance\/","og_site_name":"CANARIE","article_modified_time":"2024-11-29T18:11:57+00:00","og_image":[{"width":800,"height":405,"url":"https:\/\/www.canarie.ca\/wp-content\/uploads\/2018\/02\/news_FIM.png","type":"image\/png"}],"twitter_card":"summary_large_image","schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.canarie.ca\/fr\/document\/shibboleth-v4-upgrade-guidance\/","url":"https:\/\/www.canarie.ca\/fr\/document\/shibboleth-v4-upgrade-guidance\/","name":"FCA \u2013 Mise \u00e0 niveau de Shibboleth - CANARIE","isPartOf":{"@id":"https:\/\/www.canarie.ca\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.canarie.ca\/fr\/document\/shibboleth-v4-upgrade-guidance\/#primaryimage"},"image":{"@id":"https:\/\/www.canarie.ca\/fr\/document\/shibboleth-v4-upgrade-guidance\/#primaryimage"},"thumbnailUrl":"https:\/\/www.canarie.ca\/wp-content\/uploads\/2018\/02\/news_FIM.png","datePublished":"2021-03-25T17:46:00+00:00","dateModified":"2024-11-29T18:11:57+00:00","breadcrumb":{"@id":"https:\/\/www.canarie.ca\/fr\/document\/shibboleth-v4-upgrade-guidance\/#breadcrumb"},"inLanguage":"fr-FR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.canarie.ca\/fr\/document\/shibboleth-v4-upgrade-guidance\/"]}]},{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/www.canarie.ca\/fr\/document\/shibboleth-v4-upgrade-guidance\/#primaryimage","url":"https:\/\/www.canarie.ca\/wp-content\/uploads\/2018\/02\/news_FIM.png","contentUrl":"https:\/\/www.canarie.ca\/wp-content\/uploads\/2018\/02\/news_FIM.png","width":800,"height":405,"caption":"caf fim"},{"@type":"BreadcrumbList","@id":"https:\/\/www.canarie.ca\/fr\/document\/shibboleth-v4-upgrade-guidance\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/www.canarie.ca\/fr\/"},{"@type":"ListItem","position":2,"name":"FCA \u2013 Mise \u00e0 niveau de Shibboleth"}]},{"@type":"WebSite","@id":"https:\/\/www.canarie.ca\/#website","url":"https:\/\/www.canarie.ca\/","name":"CANARIE","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.canarie.ca\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"fr-FR"}]}},"_links":{"self":[{"href":"https:\/\/www.canarie.ca\/fr\/wp-json\/wp\/v2\/document\/23271","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.canarie.ca\/fr\/wp-json\/wp\/v2\/document"}],"about":[{"href":"https:\/\/www.canarie.ca\/fr\/wp-json\/wp\/v2\/types\/document"}],"version-history":[{"count":5,"href":"https:\/\/www.canarie.ca\/fr\/wp-json\/wp\/v2\/document\/23271\/revisions"}],"predecessor-version":[{"id":44638,"href":"https:\/\/www.canarie.ca\/fr\/wp-json\/wp\/v2\/document\/23271\/revisions\/44638"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.canarie.ca\/fr\/wp-json\/wp\/v2\/media\/20431"}],"wp:attachment":[{"href":"https:\/\/www.canarie.ca\/fr\/wp-json\/wp\/v2\/media?parent=23271"}],"wp:term":[{"taxonomy":"program","embeddable":true,"href":"https:\/\/www.canarie.ca\/fr\/wp-json\/wp\/v2\/program?post=23271"},{"taxonomy":"document_type","embeddable":true,"href":"https:\/\/www.canarie.ca\/fr\/wp-json\/wp\/v2\/document_type?post=23271"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}