An open discussion list for topics related to the eduGAIN interfederation service.

[Marco Fargetta <Marco.Fargetta AT ct.infn.it>]

Hi Andi,

I have just read the documents and beside what others have already said
I would add a couple of remarks for the document "Identity Federation Policy":

- In some sections there is a distinction between Partners and
  Federation Members but they are not well defined, e.g. no definition
  for Partners, no join procedure (it could be the same but is not
  written), etc...

- For the interfederation in section 6.1, members are forced by the
  operator to join the interfederation or they can decide. Reading the
  section it is not clear if they can opt(-in/out) the interfederation.


Additionally, is the federation already in place? Do you have metadata
and participants? The web does not have such information.

Cheers,
Marco



On Wed, Oct 24, 2018 at 07:40:41AM +0000, Andi Malaj wrote:
> Hi Marco,
> 
> They are online now.
> 
> Thank you
> 
> Andi Malaj on Mobile
> 
> ________________________________
> From: Marco Fargetta <Marco.Fargetta AT ct.infn.it>
> Sent: Tuesday, October 23, 2018 4:28:14 PM
> To: Andi Malaj
> Cc: Rhys Smith; edugain-discuss AT lists.geant.org; Dr. Arjan Xhelaj; Brook 
> Schofield
> Subject: Re: [eduGAIN-discuss] Assessment of Albania/RASH for eduGAIN 
> membership
> 
> Hi Andi,
> 
> I cannot find the documents in your site. Have you removed them for the
> update or there is a problem? Could you let me know when they will be
> accessible?
> 
> Cheers,
> Marco
> 
> On Tue, Oct 23, 2018 at 08:51:20AM +0000, Andi Malaj wrote:
> > Hello,
> >
> > Thanks for all points notified.We will correct them ASAP.
> > Apologies for the mess about the name. We started calling it 'eduGAIN 
> > Albania', then we passed in 'eduID Albania' to be aligned with other 
> > federations.
> > We are updating all documentation.
> >
> > Thanks
> >
> >
> > -----Original Message-----
> > From: Rhys Smith <Rhys.Smith AT jisc.ac.uk>
> > Sent: Monday, October 22, 2018 12:43 PM
> > To: Brook Schofield <brook.schofield AT geant.org>
> > Cc: edugain-discuss AT lists.geant.org; Andi Malaj <amalaj AT rash.al>; Dr. 
> > Arjan Xhelaj <arjanxhelaj AT rash.al>
> > Subject: Re: [eduGAIN-discuss] Assessment of Albania/RASH for eduGAIN 
> > membership
> >
> > Overall comments:
> >
> > * Is the federation called eduGain Albania, eduID Albania, or RaSH? All 
> > of the documents and the website confuse the two in several places (see 
> > below).
> >
> > * Website is lacking a lot of stuff, e.g. the Participants tab is 
> > entirely empty.
> >
> >
> > MRPS:
> >
> > * Section 3 suggests the membership procedures are at “edugain.rash.al” - 
> > this domain doesn’t exist. Should be eduid.rash.il? If so, then at least 
> > eduid.rash.il resolves, but it has no such documents.
> >
> > * Section 5 - same as above, reference to edugain.rash.al
> >
> > * Section 5 suggests you check domain ownership for EntityIDs, but does 
> > not mention checking it for scopes. See 
> > https://github.com/REFEDS/MRPS/pull/5 for suggested wording.
> >
> >
> > Federation Policy:
> >
> > * Section 1 - You define a “Service Provider” as “An organization that 
> > […]” - but Service Provider is a role that an organisation can play, not 
> > an organization in of itself. Your definition of “Federation Member” even 
> > makes that clear.
> >
> > * Section 2 - you talk about “EduGAIN Albania” but have a url of 
> > eduID.rash.al
> >
> > * Section 3.1 - "MB is authorized to accept new Federation documents” - 
> > what’s a federation document? That isn’t mentioned anywhere else.
> >
> > * Section 3.1 and 4.1 - "Members and Partners” - what’s a partner? I 
> > can’t see that defined anywhere.
> >
> > * Section 3.2 and 3.3 - you can suspend individual Technology Profiles 
> > and members must comply with them - where are your technology profiles 
> > documented?
> >
> > * Section 3.3 - appendix Fees - no such appendix.
> >
> > * Section 3.3 - Transfer of personal data - do you define personal data 
> > anywhere? Do you define what you mean by consent anywhere?
> >
> > * Section 6 - “*governing body*” is used twice, but is not defined 
> > anywhere. Should be Member’s Board?
> >
> > * Section 6.1 - how interfederation works is "described in appropriate 
> > Technology Profiles.” - Where are these?
> >
> > * Nothing on how you would terminate the federation; members may want 
> > reassurance of how much notice you’d give them before doing such a thing.
> >
> > Best,
> > Rhys.
> > --
> > Dr Rhys Smith
> > Chief Technical Architect, Trust & Identity
> > Jisc
> >
> > T: +44 (0) 1235 822145
> > M: +44 (0) 7968 087821
> > Skype: rhys-smith
> > GPG: 0x4638C985
> > Lumen House, Library Avenue, Harwell Oxford, Didcot, OX11 0SG
> >
> > jisc.ac.uk
> >
> > Jisc is a registered charity (number 1149740) and a company limited by 
> > guarantee which is registered in England under Company No. 5747339, VAT 
> > No. GB 197 0632 86. Jisc’s registered office is: One Castlepark, Tower 
> > Hill, Bristol, BS2 0JA. T 0203 697 5800.
> >
> 
> --
> ====================================================
> Eng. Marco Fargetta, PhD
> 
> Istituto Nazionale di Fisica Nucleare (INFN)
> Catania, Italy
> 
> Tel. +39 095 378 5469
> ====================================================
> 

-- 
====================================================
Eng. Marco Fargetta, PhD
 
Istituto Nazionale di Fisica Nucleare (INFN)
Catania, Italy

Tel. +39 095 378 5469
====================================================

Attachment: smime.p7s
Description: S/MIME cryptographic signature