An open discussion list for topics related to the eduGAIN interfederation service.

[Maarten Kremers <maarten.kremers AT surf.nl>]

Hi Lukas

> On 16 May 2022, at 08:48, Lukas Hämmerle <lukas.haemmerle AT switch.ch> wrote:
> 
> Hello all
> 
> What is eduGAIN's current official policy and best-practice in terms of 
> guest and open Identity Providers where just anyone can create an account?
> 
> I as far as I see, there is nothing directly mentioned in the constitution 
> and declaration regarding this point. One relevant document in this matter 
> is the registration practice statement that each federation writes (and 
> changes) on its own.
> 
> The "Registration practice statement" of a federation declares which types 
> of organisations are accepted in a federation. Assuming that a university 
> or a federation operator itself would operate a guest IdP that allows just 
> any user with a valid e-mail address to register an account, would this be 
> ok? Or are there any limits on which attributes and values this IdP 
> should/should not release?
> 
> I know that there exist at least one guest IdP in eduGAIN (that releases 
> just a limited set of attributes) and that probably more exist. Still, I'm 
> interested in some current official response and view on this topic.
> 
> The background of this question has to do with SWITCH edu-ID where we 
> currently publish the university IdPs in eduGAIN but don't allow private 
> identities (without university affiliation) to access eduGAIN services. 
> There are library use cases where people (without university affiliation) 
> need access to publisher resources (accessible via eduGAIN). Therefore, we 
> are exploring the options how to allow access to these users.

How do you currently tackle the affiliation ? Which one do the institutional 
users get (student AT university.ch ?) and which one guests (affiliate AT eduid.ch 
?)

Cheers,
 Maarten     

> 
> 
> Best Regards
> Lukas
> 
> -- 
> SWITCH
> Lukas Hämmerle, Trust & Identity
> Werdstrasse 2, P.O. Box, 8021 Zurich, Switzerland
> +41 44 268 15 64  lukas.haemmerle AT switch.ch  http://www.switch.ch

—
Maarten Kremers
Technical Product Manager Trust & Identity
GÉANT Project Task Leader Trust & Identity Enabling Communities

SURF | E maarten.kremers AT surf.nl | T +31 30 88 787 3000 | Available: Mon - 
Tue - Wed - Fri
SURF is the collaborative organisation for ICT in Dutch education and research