An open discussion list for topics related to the eduGAIN interfederation service.

[Mihály Héder <mihaly.heder AT sztaki.hu>]

Dear REFEDS community,

On behalf of the Trust & Identity Incubator, we kindly invite you to our 
half-time demo.

– Why –
 The goal of this event is to periodically present the results of 
current Incubator activities in order to collect feedback from the 
community as early as possible. As this is our half-time demo, we will 
showcase intermediate results from this cycle. It’s the perfect 
opportunity to get the latest updates on a variety of topics in a short 
amount of time—and to weigh in.

– When –
The demo will take place on Zoom on Thursday, 5 February 2026, from 
16:00 to 18:00 CET.
 (Start times: Denver – 8:00 AM, New York – 10:00 AM, London – 3:00 PM, 
Athens – 5:00 PM)
Please register here: https://events.geant.org/event/2066/
The event is structured as a two-hour session, with time slots allocated 
for topics. If a talk finishes early, we will still adhere to the 
published schedule.

– What –
This time, we have four exciting sessions for you:

16:00 - 16:30 Shibboleth and SSP Verifiable Credential Issuers' DIIP 
compliance

In the world of OID4 wallets there is a large variety of different 
authentication flows, cryptographic methods, presentation formats and 
other parameters, meaning that even if two components are supporting 
OID4* it is far from certain that they can actually communicate. More 
interoperability is needed, which is achieved by DIIP profile. We 
attempt to implement this profile for Shibboleth and simpleSAMLphp

16:30 - 16:45 Fuzz testing of AAI software (TIM student topic)

The goal is to research the security of Single Sign-On (SSO) 
implementations using fuzzing and possibly other methods.

16:45 - 17:00 Accessibility testing of wallet ecosystem

This activity focuses on users’ perspectives with wallets in research 
and education, paying special attention to the needs of underrepresented 
groups, i.e. persons with disabilities. We aim to test existing wallets 
prioritising accessibility in both design and implementation, ensuring 
that they are usable and beneficial to all users, regardless of their 
backgrounds or abilities.

17:00 - 18:00 OIDFed topics:
Attempt at an apache module (TIM student), php oidfed implementation, 
work on oidfed entity registry solution, embedded OP discovery, token 
introspection (only loosely connected as it is really an OAuth2 topic)
[links to descriptions below]

"Apache mod_oidfed (TIM)" 
[https://wiki.geant.org/spaces/G52W5/pages/1197900023/Apache+mod_oidfed]
"PHP OIDFed library and RP" 
[https://wiki.geant.org/spaces/G52W5/pages/1197900021/php+oidfed+library+and+RP]
"OpenID Federation Registry" 
[https://wiki.geant.org/spaces/G52W5/pages/1197900017/OpenID+Federation+Registry]
"Local discovery for OIDFed" 
[https://wiki.geant.org/spaces/G52W5/pages/1197900019/Local+discovery+for+OIDFed]
"A Token Introspection Proxy for supporting AARC-G052" 
[https://wiki.geant.org/spaces/G52W5/pages/1197900025/A+Token+Introspection+Proxy+for+supporting+AARC-G052]

All sessions will be recorded and published after the event at:

https://wiki.geant.org/spaces/G52W5/pages/1293090879/Cycle+11+half-time+Demo

Hope to see you there,

Andrijana & Mihály

--
Mihály Héder, PhD
senior research fellow
HUN-REN SZTAKI Institute for Computer Science and Control