Questions for SP communities (e.g. research infrastructure projects or individual SP admins).
...
The approach could be an interview or a web based survey
...
How important it is for you that...
Identity concept
- an all account belongs to an individual person (i.e. there are no shared accounts like "libraryuser1")?
- and s/he is traceable all users are traceable (i.e. the home organization knows and can reach him/her)?
- and Home Organisation is willing to collaborate with you if their user misbehaves?
- that you (as an SP community) can block him/her from the serviceyour services?
- user identifiers are persistent i.e. not reassigned to (re-cycled) to another person over time?
- user identifiers are shared by multiple SPs (i.e. not pairwise/targeted)
...
- the home organization has a documented identity vetting process (whatever it is)?
- the identity vetting process is face-to-face or equivalent?
On-line authentication
- passwordsAre password-based authentication good enough for you?
- passwords with quality guaranteesOr should passwords have some kind of quality floor? (What kind of guaranteesquality floor?)
- Do you need two factor authentication? (What kind of?)
Would you like to use step-up authentication as a service?
...