An open discussion list for topics related to the eduGAIN interfederation service.

[Marco Fargetta <Marco.Fargetta AT ct.infn.it>]

Hi Andi,

I have seen the document in your web. Can you synchronise the link
name with the documents (e.g. the link is "edugain Federation Policy" and the
document "eduID Albania Federation Policy")?

In the Federation Policy document there is an incomplete sentence in
page 5 line 8.

Last paragraph of section "Rules of membership" send the reader to the
same section for more information creating a loop. Additionally, in the
point 3 only a specific set of companies are identified "Companies from
ICT ecosystem" but in the document "How to join" any organisation can
become a Service Provider as long as the services provided
promote the academic, research and educational work. They should
identify the same organisations.

The "Data protection" should include some indication for non EU
provider.

Cheers,
Marco




On Fri, Nov 16, 2018 at 07:16:03PM +0000, Andi Malaj wrote:
> Hello,
> 
> 
> 
> We have done some corrections and clarifications on the doc.
> 
> Attached you may find the last versions we are uploading in the site.
> 
> 
> 
> Hope to have clarified all points notified by.
> 
> 
> 
> Thank You
> 
> 
> 
> -----Original Message-----
> From: Marco Fargetta <Marco.Fargetta AT ct.infn.it>
> Sent: Friday, October 26, 2018 5:05 PM
> To: Andi Malaj <amalaj AT rash.al>
> Cc: Rhys Smith <rhys.smith AT jisc.ac.uk>; edugain-discuss AT lists.geant.org; 
> Dr. Arjan Xhelaj <arjanxhelaj AT rash.al>; Brook Schofield 
> <brook.schofield AT geant.org>
> Subject: Re: [eduGAIN-discuss] Assessment of Albania/RASH for eduGAIN 
> membership
> 
> 
> 
> Hi Andi,
> 
> 
> 
> I have just read the documents and beside what others have already said
> 
> I would add a couple of remarks for the document "Identity Federation 
> Policy":
> 
> 
> 
> - In some sections there is a distinction between Partners and
> 
>   Federation Members but they are not well defined, e.g. no definition
> 
>   for Partners, no join procedure (it could be the same but is not
> 
>   written), etc...
> 
> 
> 
> - For the interfederation in section 6.1, members are forced by the
> 
>   operator to join the interfederation or they can decide. Reading the
> 
>   section it is not clear if they can opt(-in/out) the interfederation.
> 
> 
> 
> 
> 
> Additionally, is the federation already in place? Do you have metadata
> 
> and participants? The web does not have such information.
> 
> 
> 
> Cheers,
> 
> Marco
> 
> 
> 
> 
> 
> 
> 
> On Wed, Oct 24, 2018 at 07:40:41AM +0000, Andi Malaj wrote:
> 
> > Hi Marco,
> 
> >
> 
> > They are online now.
> 
> >
> 
> > Thank you
> 
> >
> 
> > Andi Malaj on Mobile
> 
> >
> 
> > ________________________________
> 
> > From: Marco Fargetta 
> > <Marco.Fargetta AT ct.infn.it<mailto:Marco.Fargetta AT ct.infn.it>>
> 
> > Sent: Tuesday, October 23, 2018 4:28:14 PM
> 
> > To: Andi Malaj
> 
> > Cc: Rhys Smith; 
> > edugain-discuss AT lists.geant.org<mailto:edugain-discuss AT lists.geant.org>; 
> > Dr. Arjan Xhelaj; Brook Schofield
> 
> > Subject: Re: [eduGAIN-discuss] Assessment of Albania/RASH for eduGAIN 
> > membership
> 
> >
> 
> > Hi Andi,
> 
> >
> 
> > I cannot find the documents in your site. Have you removed them for the
> 
> > update or there is a problem? Could you let me know when they will be
> 
> > accessible?
> 
> >
> 
> > Cheers,
> 
> > Marco
> 
> >
> 
> > On Tue, Oct 23, 2018 at 08:51:20AM +0000, Andi Malaj wrote:
> 
> > > Hello,
> 
> > >
> 
> > > Thanks for all points notified.We will correct them ASAP.
> 
> > > Apologies for the mess about the name. We started calling it 'eduGAIN 
> > > Albania', then we passed in 'eduID Albania' to be aligned with other 
> > > federations.
> 
> > > We are updating all documentation.
> 
> > >
> 
> > > Thanks
> 
> > >
> 
> > >
> 
> > > -----Original Message-----
> 
> > > From: Rhys Smith <Rhys.Smith AT jisc.ac.uk<mailto:Rhys.Smith AT jisc.ac.uk>>
> 
> > > Sent: Monday, October 22, 2018 12:43 PM
> 
> > > To: Brook Schofield 
> > > <brook.schofield AT geant.org<mailto:brook.schofield AT geant.org>>
> 
> > > Cc: 
> > > edugain-discuss AT lists.geant.org<mailto:edugain-discuss AT lists.geant.org>;
> > >  Andi Malaj <amalaj AT rash.al<mailto:amalaj AT rash.al>>; Dr. Arjan Xhelaj 
> > > <arjanxhelaj AT rash.al<mailto:arjanxhelaj AT rash.al>>
> 
> > > Subject: Re: [eduGAIN-discuss] Assessment of Albania/RASH for eduGAIN 
> > > membership
> 
> > >
> 
> > > Overall comments:
> 
> > >
> 
> > > * Is the federation called eduGain Albania, eduID Albania, or RaSH? All 
> > > of the documents and the website confuse the two in several places (see 
> > > below).
> 
> > >
> 
> > > * Website is lacking a lot of stuff, e.g. the Participants tab is 
> > > entirely empty.
> 
> > >
> 
> > >
> 
> > > MRPS:
> 
> > >
> 
> > > * Section 3 suggests the membership procedures are at “edugain.rash.al” 
> > > - this domain doesn’t exist. Should be eduid.rash.il? If so, then at 
> > > least eduid.rash.il resolves, but it has no such documents.
> 
> > >
> 
> > > * Section 5 - same as above, reference to edugain.rash.al
> 
> > >
> 
> > > * Section 5 suggests you check domain ownership for EntityIDs, but does 
> > > not mention checking it for scopes. See 
> > > https://github.com/REFEDS/MRPS/pull/5 for suggested wording.
> 
> > >
> 
> > >
> 
> > > Federation Policy:
> 
> > >
> 
> > > * Section 1 - You define a “Service Provider” as “An organization that 
> > > […]” - but Service Provider is a role that an organisation can play, 
> > > not an organization in of itself. Your definition of “Federation 
> > > Member” even makes that clear.
> 
> > >
> 
> > > * Section 2 - you talk about “EduGAIN Albania” but have a url of 
> > > eduID.rash.al
> 
> > >
> 
> > > * Section 3.1 - "MB is authorized to accept new Federation documents” - 
> > > what’s a federation document? That isn’t mentioned anywhere else.
> 
> > >
> 
> > > * Section 3.1 and 4.1 - "Members and Partners” - what’s a partner? I 
> > > can’t see that defined anywhere.
> 
> > >
> 
> > > * Section 3.2 and 3.3 - you can suspend individual Technology Profiles 
> > > and members must comply with them - where are your technology profiles 
> > > documented?
> 
> > >
> 
> > > * Section 3.3 - appendix Fees - no such appendix.
> 
> > >
> 
> > > * Section 3.3 - Transfer of personal data - do you define personal data 
> > > anywhere? Do you define what you mean by consent anywhere?
> 
> > >
> 
> > > * Section 6 - “*governing body*” is used twice, but is not defined 
> > > anywhere. Should be Member’s Board?
> 
> > >
> 
> > > * Section 6.1 - how interfederation works is "described in appropriate 
> > > Technology Profiles.” - Where are these?
> 
> > >
> 
> > > * Nothing on how you would terminate the federation; members may want 
> > > reassurance of how much notice you’d give them before doing such a 
> > > thing.
> 
> > >
> 
> > > Best,
> 
> > > Rhys.
> 
> > > --
> 
> > > Dr Rhys Smith
> 
> > > Chief Technical Architect, Trust & Identity
> 
> > > Jisc
> 
> > >
> 
> > > T: +44 (0) 1235 822145
> 
> > > M: +44 (0) 7968 087821
> 
> > > Skype: rhys-smith
> 
> > > GPG: 0x4638C985
> 
> > > Lumen House, Library Avenue, Harwell Oxford, Didcot, OX11 0SG
> 
> > >
> 
> > > jisc.ac.uk
> 
> > >
> 
> > > Jisc is a registered charity (number 1149740) and a company limited by 
> > > guarantee which is registered in England under Company No. 5747339, VAT 
> > > No. GB 197 0632 86. Jisc’s registered office is: One Castlepark, Tower 
> > > Hill, Bristol, BS2 0JA. T 0203 697 5800.
> 
> > >
> 
> >
> 
> > --
> 
> > ====================================================
> 
> > Eng. Marco Fargetta, PhD
> 
> >
> 
> > Istituto Nazionale di Fisica Nucleare (INFN)
> 
> > Catania, Italy
> 
> >
> 
> > Tel. +39 095 378 5469
> 
> > ====================================================
> 
> >
> 
> 
> 
> --
> 
> ====================================================
> 
> Eng. Marco Fargetta, PhD
> 
> Istituto Nazionale di Fisica Nucleare (INFN)
> 
> Catania, Italy
> 
> 
> 
> Tel. +39 095 378 5469
> 
> ====================================================
> 
> 

-- 
====================================================
Eng. Marco Fargetta, PhD
 
Istituto Nazionale di Fisica Nucleare (INFN)
Catania, Italy

Tel. +39 095 378 5469
====================================================

Attachment: smime.p7s
Description: S/MIME cryptographic signature