edugain-discuss AT lists.geant.org
Subject: An open discussion list for topics related to the eduGAIN interfederation service.
List archive
- From: Nicole Harris <harris AT terena.org>
- To: edugain-discuss AT geant.net
- Subject: Re: [eduGAIN-discuss] ALL eduGAIN entities in UK federation?
- Date: Wed, 05 Feb 2014 11:05:41 +0100
- List-archive: <https://mail.geant.net/mailman/private/edugain-discuss/>
- List-id: eduGAIN discussion list <edugain-discuss.geant.net>
On 05/02/2014 10:46, Glenn Wearen
wrote:
Our goal should be to only present a list of
institutions where we can reasonably assume that users will be
able to successfully login (i.e. metadata is trusted, attributes
are released).
But trusted metadata + released attributes does not equate to
successful login? The only way this can be achieved is if you know
which resources every IdP subscribes too...and that's a shifting
concept. Our approach in Edugate (implemented in JAGGER) is to provide
metadata tailored for each SP (and IdP) based on circles of
trust, where eduGAIN is one such circle. We've yet to tailor the
metadata for SP's where we know the IdP has set an attribute
release policy to match the SP's requirements; but we'll get
there eventually.
That's a lot of work :-)The real problem is this example below is that SCRAN is relying on the UK federation central WAYF which does not make any of these distinctions. The solution would either be to say the central WAYFs are borked in the age of edugain, or to ensure that federations and services implement elegant fail messages so that users are well informed...which fits in with Brook's comments below. Although we have to weigh up the likelihood of a user from the Czech Republic finding scran.ac.uk, clicking on 'shibboleth users' (another broken problem) and then finding the UK federation WAYF and finding their IdP in it. Glenn
HEAnet Limited, Ireland's Education and Research
Network -
1st Floor, 5 George's Dock, IFSC, Dublin 1
Registered in Ireland, no 275301 tel:
+353-1-6609040 fax: +353-1-6603666
On 5 Feb 2014, at 09:14, Brook Schofield wrote:
-- ===================================================
Brook Schofield, TERENA Project Development Officer TERENA Secretariat, Singel 468 D, 1017 AW Amsterdam, The Netherlands Tel +31 20 530 4488 Fax +31 20 530 4499 Mob +31 65 155 3991 www.terena.org -- ---------------- Project Development Officer TERENA Singel 468 D Amsterdam, 1017 AW The Netherlands T: +31(0)20 5304488 F: +31(0)20 5304499 mob: +31(0)646 105395 |
- [eduGAIN-discuss] ALL eduGAIN entities in UK federation?, Jan Tomášek, 05-Feb-2014
- Re: [eduGAIN-discuss] ALL eduGAIN entities in UK federation?, Brook Schofield, 05-Feb-2014
- Re: [eduGAIN-discuss] ALL eduGAIN entities in UK federation?, Glenn Wearen, 05-Feb-2014
- Re: [eduGAIN-discuss] ALL eduGAIN entities in UK federation?, Nicole Harris, 02/05/2014
- Re: [eduGAIN-discuss] ALL eduGAIN entities in UK federation?, Glenn Wearen, 05-Feb-2014
- Re: [eduGAIN-discuss] ALL eduGAIN entities in UK federation?, Nicole Harris, 02/05/2014
- Re: [eduGAIN-discuss] ALL eduGAIN entities in UK federation?, Glenn Wearen, 05-Feb-2014
- Re: [eduGAIN-discuss] ALL eduGAIN entities in UK federation?, Alex Stuart, 05-Feb-2014
- Re: [eduGAIN-discuss] ALL eduGAIN entities in UK federation?, Jan Tomášek, 05-Feb-2014
- Re: [eduGAIN-discuss] ALL eduGAIN entities in UK federation?, Tomasz Wolniewicz, 05-Feb-2014
- Re: [eduGAIN-discuss] ALL eduGAIN entities in UK federation?, Nicole Harris, 05-Feb-2014
- Re: [eduGAIN-discuss] ALL eduGAIN entities in UK federation?, Peter Schober, 05-Feb-2014
- Re: [eduGAIN-discuss] ALL eduGAIN entities in UK federation?, Peter Schober, 05-Feb-2014
- Re: [eduGAIN-discuss] ALL eduGAIN entities in UK federation?, Leif Johansson, 05-Feb-2014
- Re: [eduGAIN-discuss] ALL eduGAIN entities in UK federation?, Jan Tomášek, 05-Feb-2014
- Re: [eduGAIN-discuss] ALL eduGAIN entities in UK federation?, Peter Schober, 05-Feb-2014
- Re: [eduGAIN-discuss] ALL eduGAIN entities in UK federation?, Jan Tomášek, 05-Feb-2014
- Re: [eduGAIN-discuss] ALL eduGAIN entities in UK federation?, Jan Tomášek, 05-Feb-2014
- Re: [eduGAIN-discuss] ALL eduGAIN entities in UK federation?, Brook Schofield, 05-Feb-2014
Archive powered by MHonArc 2.6.19.