edugain-discuss AT lists.geant.org

Subject: An open discussion list for topics related to the eduGAIN interfederation service.

List archive

Re: [eduGAIN-discuss] [eduGAIN-Assembly] eduGAIN Policy and Compliance Update

From: Maarten Kremers <maarten.kremers AT surf.nl>
To: edugain-assembly <edugain-assembly AT lists.geant.org>, edugain-discuss <edugain-discuss AT lists.geant.org>
Subject: Re: [eduGAIN-discuss] [eduGAIN-Assembly] eduGAIN Policy and Compliance Update
Date: Fri, 10 Oct 2025 11:12:11 +0000
Accept-language: en-NL, nl-NL, en-US
Arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=surf.nl; dmarc=pass action=none header.from=surf.nl; dkim=pass header.d=surf.nl; arc=none
Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=aGCIp8/mx3SPl30zoEPBIWAb1PwkMrpZ+uWcRnJHSn0=; b=djSID7h5ayJsrHYbTiauRs/MLvgLD3uY8zDjMfjJ9aI+btkJ6Bmv6BnsjyFvPpT+JDr4beWtdaMSZiekNDXJk9+Ykdtznv68VUZUh9I7yjnKra3jDDNW3Z8tjJAwuHzvpMLeDw1zE+7xHGvPlXd8ePZ2OwQZhTvaZsmhEEyCegkWGz0O0pV3emUSgwjf61qJ2HyRBlK8kCsQG8i5u/3nvwexCVvZTnqw8piWvBgCBEdKXWpjxUvPEim2vuq/9YrsKlKWr2xyBp7aRYxlEKiJSsP25jnEZqq+xX1zxlfCILmqpH+uslkYFFXHxOXtBb/0UCPFCXfGqQFhOp1kSKIlpQ==
Arc-seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=IL1Qc9RFMQRNkMTTd41ZGu83deKbYYalKWX8cQ+YmBK2oMVraO/DZJGsWHOpA+bJ1ievzzz7Gs0sAzDN3Y5se9phyN8TlRvNDzWtlWGyDiOTnapVFFXnNYjLfHh5DJ2oS+HKYlvUoDR3z5jqjV8RBuIxK2Yn/SDzcWc4MdkX/uVStEjgn8sLEQQAfXW5Pn8hwr58WraRf0aZKcZXyQobqB3dtk1fFmZDbvmTTWWp8JQbGj66zTDlwkjE+Ioi6CJPxnZQTrZU4hDh245mY/AS9elRqFx/aKiDo2J+lk/HmtWyPIMLjZI//OeuGod1wBmnbirYDMFB1N3fJma4zfKiXw==
Authentication-results: mail.geant.org; dkim=pass (1024-bit key; unprotected) header.d=surf.nl header.i= AT surf.nl header.a=rsa-sha256 header.s=selector1 header.b=XjepaS8D; dkim-atps=neutral
Authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=surf.nl;

Hi,

For readability attached also the (original) markdown document, as my pdf conversion crippled the layout I noticed.

-Maarten

On 10 Oct 2025, at 12:39, Nicole Harris <edugain-assembly AT lists.geant.org> wrote:

Hi All

Now that the September travel period of madness is over, I am about to start a poll to the eduGAIN Technical Profiles working group under way so this is a last call for people who may be interested to sign up:https://wiki.geant.org/spaces/eduGAIN/pages/1072398400/eduGAIN+Technical+Profiles+Working+Group and https://lists.geant.org/sympa/info/edugain-policy.

As a reminder, we are going to be looking at updates to the SAML Technical Profile as well as the proposed requirements for OpenID in this discussion – specifically introducing new mandatory requirements for privacy, security and assurance.

In order to help whet your appetite on that point, Maarten Kremers has produced a report which I attach to this email showing where we are with compliance to and engagement with privacy and security initiatives.

A summary below:

71.9% of SPs provide at least basic compliance
56.3% of SPs achieve full compliance (security contact + privacy statement)
35.0% of IdPs have security contacts
419 Privacy Statement links broken (15.6%)

I hope you find it interesting and look forward to talking to many of you about policy and compliance soon!

Nicole

--
Nicole Harris
Senior Trust and Security Manager
GÉANT
T: +31 (0) 20 530 4488
M: +31 (0) 646 105395

PGP key Fingerprint: 4017 2E40 13D4 9DA7 68E1 8ADB 3F11 9CDB FC48 6216

Networks • Services • People

Learn more at www.geant.org

GÉANT Vereniging (Association) is registered with the Chamber of Commerce in Amsterdam with registration number 40535155 and operates in the UK as a branch of GÉANT Vereniging. Registered office: Hoekenrode 3, 1102BR Amsterdam, The Netherlands. UK branch address: City House, 126 -130 Hills Road, Cambridge CB2 1PQ, UK.

<eduGAIN-report-20251006.pdf>

—
Maarten Kremers
Technical Product Manager Trust & Identity
GÉANT Project (GN5-2) Work Package Leader Trust & Identity

SURF | E maarten.kremers AT surf.nl | T +31 30 88 787 3000 | Available: Mon - Tue - Wed - Fri
SURF is the collaborative organisation for ICT in Dutch education and research

Attachment: eduGAIN-report-20251006.md
Description: eduGAIN-report-20251006.md

[eduGAIN-discuss] eduGAIN Policy and Compliance Update, Nicole Harris, 10-Oct-2025
- Re: [eduGAIN-discuss] [eduGAIN-Assembly] eduGAIN Policy and Compliance Update, Maarten Kremers, 10/10/2025