Production and Test Environments
CANARIE’s FIM has two environments:
- Production environment for production facing services and high availability profile
- Test environment for non-production services with a best effort availability profile
Your IdP or SP can participate in either or both environments as long as the operation of the IdP or SP complies with the most strict practices and can interact appropriately with the less strict entities. For instance, if you have a Service Provider in both the FIM Production and Test environments, it should, at minimum, comply with Production practices, despite being present in the test environment and capable of allowing test Identity Providers to sign in.
Common Configuration Elements
CANARIE’s FIM Production and Test environments mirror features and behaviours as best as possible to facilitate Participants’ change control practices, enabling you to test changes or updates sufficiently before promoting them to production. Note: The examples in the remainder of this document will use/refer to production settings.
| Element | Production Federation | Test Federation |
| Operations URL | https://caf-shib2ops.ca/CoreServices/ | Same |
| Signing key | https://caf-shib2ops.ca/CoreServices/caf_metadata_verify.crt | Nothing is signed in CAF test therefore no key exists |
| Domestic Aggregate | https://caf-shib2ops.ca/CoreServices/caf_metadata_signed_sha256.xml | https://caf-shib2ops.ca/CoreServices/testbed/caf_test_fed_unsigned.xml |
| Inter-federation Aggregate | https://caf-shib2ops.ca/CoreServices/caf_interfed_signed.xml | There is no test interfederation aggregate |
| Central Discovery Service (discoveryURL) | https://caf-shib2ops.ca/DS/CAF.ds | https://ds.caftest.canarie.ca/DS/CAF.ds |