edugain-discuss AT lists.geant.org

Subject: An open discussion list for topics related to the eduGAIN interfederation service.

List archive

[eduGAIN-discuss] eduGAIN Policy and Compliance Update

From: Nicole Harris <nicole.harris AT geant.org>
To: edugain-assembly <edugain-assembly AT lists.geant.org>, edugain-discuss <edugain-discuss AT lists.geant.org>
Subject: [eduGAIN-discuss] eduGAIN Policy and Compliance Update
Date: Fri, 10 Oct 2025 10:39:44 +0000
Accept-language: en-GB, en-US
Arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=geant.org; dmarc=pass action=none header.from=geant.org; dkim=pass header.d=geant.org; arc=none
Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=3cZNZ1h3HEe4xa6o7Vd6QSYuK+Wewx38k8CWkL0TnIM=; b=rgtJdn884KiAZ6ISiHis+mV3dLttIHxFCMKoAS8Abt5jvQaFby6d/Z5aLb0sXFh51sMjyA/w0TNHs3ladjuob401JupEtnmXiMkKiRuXH2bom8uGjM+lDldess7VRjwpYYiUQEdXhPtQ94GFzITZwD1o1SwbdQ5u5LFGPDx9IO86IPCiVwROGjuykEb04M6vCGwzGI9DydQOKX8yHvZoQaw4D+LHq4AVixAq5zCI1UtmQLs83pW/LkzJWeoAAwSKLd0A9fYM5WE9Uus2jYRsJJ64z0wS1hZFjVklEGL3gHr2CLO816pTuJATa2UVGwvDC+66UhEmAw4aPFutkbaeew==
Arc-seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=cN5RLzQS2o7PZEf05ul3ZSYI+oEwoNYVuheI3JZc6QXsrxRraOwlUG5qDkrBWq449fidlhXr82gFhkO1v5PWDWiDLyzzAut7/cX0Zhmq8E1X1LX1HZUu3m4bGIK54Ibt0sEghBO0p2yxvODKKX0LVJL7YU3rDYPYeynm9YIBZK0sg44qwzOKrfeUgpWTfzwH2CZnBcO3vbJs2zSss5TgLVopgc3vR+K8eGDztCDppwpZzQA5bEGzl3wgRhntBbzFUREq8Khw+/7aSXh0H0X8fIHlWqnFJwOvM3OX23t5CedHYsuYi3HZb1mWZBI5xAPMp2VieOD+lMcB08mGzv9QKg==
Authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=geant.org;

Hi All

Now that the September travel period of madness is over, I am about to start a poll to the eduGAIN Technical Profiles working group under way so this is a last call for people who may be interested to sign up: https://wiki.geant.org/spaces/eduGAIN/pages/1072398400/eduGAIN+Technical+Profiles+Working+Group and https://lists.geant.org/sympa/info/edugain-policy.

As a reminder, we are going to be looking at updates to the SAML Technical Profile as well as the proposed requirements for OpenID in this discussion – specifically introducing new mandatory requirements for privacy, security and assurance.

In order to help whet your appetite on that point, Maarten Kremers has produced a report which I attach to this email showing where we are with compliance to and engagement with privacy and security initiatives.

A summary below:

71.9% of SPs provide at least basic compliance
56.3% of SPs achieve full compliance (security contact + privacy statement)
35.0% of IdPs have security contacts
419 Privacy Statement links broken (15.6%)

I hope you find it interesting and look forward to talking to many of you about policy and compliance soon!

Nicole

--
Nicole Harris
Senior Trust and Security Manager
GÉANT
T: +31 (0) 20 530 4488
M: +31 (0) 646 105395

PGP key Fingerprint: 4017 2E40 13D4 9DA7 68E1 8ADB 3F11 9CDB FC48 6216

Networks • Services • People

Learn more at www.geant.org

GÉANT Vereniging (Association) is registered with the Chamber of Commerce in Amsterdam with registration number 40535155 and operates in the UK as a branch of GÉANT Vereniging. Registered office: Hoekenrode 3, 1102BR Amsterdam, The Netherlands. UK branch address: City House, 126 -130 Hills Road, Cambridge CB2 1PQ, UK.

Attachment: eduGAIN-report-20251006.pdf
Description: eduGAIN-report-20251006.pdf

[eduGAIN-discuss] eduGAIN Policy and Compliance Update, Nicole Harris, 10/10/2025
- Re: [eduGAIN-discuss] [eduGAIN-Assembly] eduGAIN Policy and Compliance Update, Maarten Kremers, 10-Oct-2025