An open discussion list for topics related to the eduGAIN interfederation service.

[Andi Malaj <amalaj AT rash.al>]

Hello,

 

We have done some corrections and clarifications on the doc.

Attached you may find the last versions we are uploading in the site.

 

Hope to have clarified all points notified by.

 

Thank You

 

-----Original Message-----
From: Marco Fargetta <Marco.Fargetta AT ct.infn.it>
Sent: Friday, October 26, 2018 5:05 PM
To: Andi Malaj <amalaj AT rash.al>
Cc: Rhys Smith <rhys.smith AT jisc.ac.uk>; edugain-discuss AT lists.geant.org; Dr. Arjan Xhelaj <arjanxhelaj AT rash.al>; Brook Schofield <brook.schofield AT geant.org>
Subject: Re: [eduGAIN-discuss] Assessment of Albania/RASH for eduGAIN membership

 

Hi Andi,

 

I have just read the documents and beside what others have already said

I would add a couple of remarks for the document "Identity Federation Policy":

 

- In some sections there is a distinction between Partners and

  Federation Members but they are not well defined, e.g. no definition

  for Partners, no join procedure (it could be the same but is not

  written), etc...

 

- For the interfederation in section 6.1, members are forced by the

  operator to join the interfederation or they can decide. Reading the

  section it is not clear if they can opt(-in/out) the interfederation.

 

 

Additionally, is the federation already in place? Do you have metadata

and participants? The web does not have such information.

 

Cheers,

Marco

 

 

 

On Wed, Oct 24, 2018 at 07:40:41AM +0000, Andi Malaj wrote:

> Hi Marco,

>

> They are online now.

>

> Thank you

>

> Andi Malaj on Mobile

>

> ________________________________

> From: Marco Fargetta <Marco.Fargetta AT ct.infn.it>

> Sent: Tuesday, October 23, 2018 4:28:14 PM

> To: Andi Malaj

> Cc: Rhys Smith; edugain-discuss AT lists.geant.org; Dr. Arjan Xhelaj; Brook Schofield

> Subject: Re: [eduGAIN-discuss] Assessment of Albania/RASH for eduGAIN membership

>

> Hi Andi,

>

> I cannot find the documents in your site. Have you removed them for the

> update or there is a problem? Could you let me know when they will be

> accessible?

>

> Cheers,

> Marco

>

> On Tue, Oct 23, 2018 at 08:51:20AM +0000, Andi Malaj wrote:

> > Hello,

> >

> > Thanks for all points notified.We will correct them ASAP.

> > Apologies for the mess about the name. We started calling it 'eduGAIN Albania', then we passed in 'eduID Albania' to be aligned with other federations.

> > We are updating all documentation.

> >

> > Thanks

> >

> >

> > -----Original Message-----

> > From: Rhys Smith <Rhys.Smith AT jisc.ac.uk>

> > Sent: Monday, October 22, 2018 12:43 PM

> > To: Brook Schofield <brook.schofield AT geant.org>

> > Cc: edugain-discuss AT lists.geant.org; Andi Malaj <amalaj AT rash.al>; Dr. Arjan Xhelaj <arjanxhelaj AT rash.al>

> > Subject: Re: [eduGAIN-discuss] Assessment of Albania/RASH for eduGAIN membership

> >

> > Overall comments:

> >

> > * Is the federation called eduGain Albania, eduID Albania, or RaSH? All of the documents and the website confuse the two in several places (see below).

> >

> > * Website is lacking a lot of stuff, e.g. the Participants tab is entirely empty.

> >

> >

> > MRPS:

> >

> > * Section 3 suggests the membership procedures are at “edugain.rash.al” - this domain doesn’t exist. Should be eduid.rash.il? If so, then at least eduid.rash.il resolves, but it has no such documents.

> >

> > * Section 5 - same as above, reference to edugain.rash.al

> >

> > * Section 5 suggests you check domain ownership for EntityIDs, but does not mention checking it for scopes. See https://github.com/REFEDS/MRPS/pull/5 for suggested wording.

> >

> >

> > Federation Policy:

> >

> > * Section 1 - You define a “Service Provider” as “An organization that […]” - but Service Provider is a role that an organisation can play, not an organization in of itself. Your definition of “Federation Member” even makes that clear.

> >

> > * Section 2 - you talk about “EduGAIN Albania” but have a url of eduID.rash.al

> >

> > * Section 3.1 - "MB is authorized to accept new Federation documents” - what’s a federation document? That isn’t mentioned anywhere else.

> >

> > * Section 3.1 and 4.1 - "Members and Partners” - what’s a partner? I can’t see that defined anywhere.

> >

> > * Section 3.2 and 3.3 - you can suspend individual Technology Profiles and members must comply with them - where are your technology profiles documented?

> >

> > * Section 3.3 - appendix Fees - no such appendix.

> >

> > * Section 3.3 - Transfer of personal data - do you define personal data anywhere? Do you define what you mean by consent anywhere?

> >

> > * Section 6 - “*governing body*” is used twice, but is not defined anywhere. Should be Member’s Board?

> >

> > * Section 6.1 - how interfederation works is "described in appropriate Technology Profiles.” - Where are these?

> >

> > * Nothing on how you would terminate the federation; members may want reassurance of how much notice you’d give them before doing such a thing.

> >

> > Best,

> > Rhys.

> > --

> > Dr Rhys Smith

> > Chief Technical Architect, Trust & Identity

> > Jisc

> >

> > T: +44 (0) 1235 822145

> > M: +44 (0) 7968 087821

> > Skype: rhys-smith

> > GPG: 0x4638C985

> > Lumen House, Library Avenue, Harwell Oxford, Didcot, OX11 0SG

> >

> > jisc.ac.uk

> >

> > Jisc is a registered charity (number 1149740) and a company limited by guarantee which is registered in England under Company No. 5747339, VAT No. GB 197 0632 86. Jisc’s registered office is: One Castlepark, Tower Hill, Bristol, BS2 0JA. T 0203 697 5800.

> >

>

> --

> ====================================================

> Eng. Marco Fargetta, PhD

>

> Istituto Nazionale di Fisica Nucleare (INFN)

> Catania, Italy

>

> Tel. +39 095 378 5469

> ====================================================

>

 

--

====================================================

Eng. Marco Fargetta, PhD

Istituto Nazionale di Fisica Nucleare (INFN)

Catania, Italy

 

Tel. +39 095 378 5469

====================================================