7 May 12:00UTC
| time | topic | presenter |
|---|---|---|
| Welcome, Introductions and Agenda Agreement | Pål | |
| Service Team Overview | Davide | |
| Terms of Reference and Work Plan | All | |
| Membership applications | Casper | |
| AOB | All | |
| Future meetings, Summary and Actions | Pål | |
| Meeting Close |
Attendees: Farhan, Francisca, Casper, Pål, Davide, Slavek, Thijs, Jonathan
Apologies:
Notes:
Welcome, Introductions and Agenda Agreement
Pål opened the meeting and welcomed the committee members.
Minutes of the previous meeting: eduGAIN Steering Committee February 2024
There are no open actions.
The agenda was approved.
Service Team Overview
The community requested to improve the warning system for member federation on the technical website and improve communications.
Moving to a distributed architecture which will improve availability and scalability.
eduGAIN Reporting UI is being updated and simplified. Simultaneously the team is working on a federation contact email check. Also, ECCS and EAC are being updated.
Training activity in collaboration with UbuntuNet Alliance.
CSIRT - Table top exercise created. Ongoing collaboration with InCommon SIRTFI security exercise initiative. This will probably take place before TechEx. Pål suggested to invite federation security contacts to future exercises.
One incident notified since the start of the year.
Terms of Reference and Work Plan
Futures WG white paper: 2022 eduGAIN Futures Working Group Report Consultation
Rec 1.1 - see 3.2
Rec 1.2 - What are the criteria to filter out single entities centrally? UKfed, SURFconext, AAF and SWAMID are already filtering entities. What rules could also be applied to the central operations? Is there a common denominator?
1. security
2. trust risk
3. trust fabric
4. technical issues
Rec1.3 - take discussion offline. Create an open Working Group?
Rec 3.1 - done
Rec 3.2 - Started but ongoing. REFEDS WG on Federation Metadata publishing. This could check if a URL has changed, but not what content has been changed. Should we be looking into an audit process? Having reliable contact information is the most important information. Layered approach:
1: Contact information (federation representatives, central contact email, security contact)
2: has the Policy / MRPS changed over the last 12 months?
3: Provide certificate - Federation X has successfully completed audit.
Rec 3.3 - done. Ongoing
- Rec 1.2 - Create document describing the the problem statement.
- Rec 3.2 - Davide and Casper to create an audit process and share with the Steering Committee.
Membership applications
Updated Register of Interest. Most activity takes place in the WACREN region.
Update on Federasi (Indonesia): final feedback provided, but we haven't received updated documentation.
Rejoining CAFMoz - this federation has been suspended since 2020. The team participated in the eduGAIN training in Addis Ababa and is rebuilding their federation.
AOB
Update on resigning of the Declaration. The secretariat wants to use edusign. During testing we stumbled on some issues with MFA. Goal is to send it out before TNC24.
- Casper to create eSG Slack group on eduGAIN Slack.
Future meetings, Summary and Actions
Ad hoc meeting at TNC. "Meet the eSG".
Next eSG meeting: Monday 12. 15CEST/9EDT/21MYT
Assembly meeting: October or hybrid meeting at TechEx (second week of December). Colocated with REFEDS.