Work Description
This work item will work with REFEDS to identify and define entity categories which will help automate and reduce the workload of attribute release and management for identity providers towards service providers. The work will include:
- Identifying priority entity categories.
- Working within REFEDS to specify entity category types and content, with sensitivity to global needs.
- Piloting key use cases within the GÉANT community in collaboration with Task 5: Enabling Users.
- Driving take-up of support for entity categories within the GÉANT eduGAIN membership by bringing proposals for their adoption to the eduGAIN SG.
Work Area Leader
Nicole Harris
Work Area Participants
Daniela Pöhn, Tangui Coulouarn, Peter Schober, Lalla Mantovani, Thomas Lenggenhager, Sigita Jurkynaite.
Work Area Actions / Ideas
- REFEDS R&S and GÉANT Data Protection Code of Conduct adoption should be the primary focus of this work area in the first instance. Priorities:
- Identity federations that are adopting and document.
- Calls / discussions with federations asking if will adopt (talk to Mikael about approach for Code of Conduct).
- Review supporting documentation requirements for R&S.
- Follow-ups from training in Porto (agenda/presentations, attendees) - perhaps online training clips?
- We've been asked to slow-down on creation of entity categories until federations have more experience with what is available but two are in discussion:
- Academia. Talk with Mikael, Lukas and Niels.
- Affiliation. Previously discussed at REFEDS but not taken forward.
- Establish a liaison with Enabling Users and identify groups that want to use the categories (e.g. CLARIN already mandates use of CoCo within their SPF)
- Discuss with Brook / eduGAIN SG - should categories become edugain "recommendations" or best practice or does that over complicate eduGAIN processes?
Work Items:
| REF | Work Item | Description | Responsible | Due Date | Status |
|---|---|---|---|---|---|
| 1.1a | Academia Entity Category | Work with REFEDS, VOPaaS and InAcademia on definition for academia category. Initial approach proved unworkable, new suggestions being discussed | Nicole | December 2016 | ONGOING |
| 1.1b | Affiliation Entity Category | Work on definition / recommendations for affiliation entity category. | Peter and Thomas | January 2016 | ONGOING |
| 1.1c | Promotion, Training and Outreach | Work with REFEDS on promotional materials for R&S and CoCo and GN4 Training / AARC on training activities. | Sigita | May 2016 | ONGOING |
| 1.1d | Tracking | Track uptake of R&S and CoCo. | Sigita | May 2016 | ONGOING |
Expected Outputs
- FORMAL DELIVERABLE: Proposal for entity categories adoption in eduGAIN.
- Others: contribute to information on the REFEDS wiki, possible glossy promo - need to talk to Cambridge.
- Progress on academia / affiliation discussions.
Pipeline
Risks / Issues
| Risk | Mitigation |
|---|---|
| Federations not able to move forward quickly enough with adoption due to legal concerns | Escalate to senior management via TIC |
| New ECs not accepted by the community | Don't push too quickly with new categories, give time for embedding |
| ECs not supported by IdPs | Reusable training materials - get on agenda at appropriate local events |
Tracking
| Category | Date | SP | IdP | Federations |
|---|---|---|---|---|
| R&S | 1 May 2015 | 21 | 20 | Didn't note |
| R&S | 10 September 2015 | 46 | 39 | DFN, CESNET, SWITCHaai, UK, SWAMID, Aconet, InCommon, Feide. (8) |
| R&S | 03 October 2015 | 51 | 43 | DFN, CESNET, PIONER.Id, SWITCHaai, UK, SWAMID, Aconet, InCommon, Feide, SurfConext, IDEM. (11) |
| R&S | 11 November 2015 | 58 | 44 | DFN, SWITCHaai, ACOnet, FEIDE, InCommon, SWAMID, eduId.hu, eduID.cz, SURFconext, UK Federation, PIONIER.Id (11) |
| R&S | 7 December 2015 | 61 | 47 | ACOnet, SWITCHaai, UK federation, DFN, PIONIER.Id, SWAMID, SURFconext, FEIDE, InCommon, eduID.cz, eduID.hu, IDEM, GRNET (13) |
| R&S | 1 February 2016 | 65 | 50 | ACOnet, SWITCHaai, UK federation, DFN, PIONIER.Id, SWAMID, SURFconext, FEIDE, InCommon, eduID.cz, eduID.hu, IDEM, GRNET (13) |
| R&S | 29 February 2016 | 80 | 87 | ACOnet, SWITCHaai, UK federation, DFN, PIONIER.Id, SWAMID, SURFconext, FEIDE, InCommon, eduID.cz, eduID.hu, IDEM, GRNET, HEAnet, FCCN (15) |
| R&S | 11 March 2016 | 81 | 90 | ACOnet, DFN, InCommon, SWITCHaai, FEIDE, eduId.hu, SWAMID, eduID.cz, SURFconext, IDEM, GRNET, RCTSaai, UK federation, Edugate, PIONIER.Id (15) |
| R&S | 11 April 2016 | 87 | 98 | PIONIER.Id, ACOnet, InCommon, SWITCHaai, UK federation, DFN, Edugate, SWAMID, SURFconext, FEIDE, eduId.hu, eduID.cz, IDEM, GRNET, RCTSaai (15) |
| R&S | 10 May 2016 | 91 | 104 | AAF, PIONIER.Id, ACOnet, InCommon, SWITCHaai, UK federation, DFN AAI, Edugate, SWAMID, IDEM, FEIDE, eduId.hu, eduID.cz, SURFconext, GRNET, RCTSaai (16) |
| R&S | 26 June 2016 | 96 | 113 | AAF, PIONIER.Id, ACOnet, InCommon, SWITCHaai, UK federation, DFN AAI, Edugate, SWAMID, IDEM, FEIDE, eduId.hu, eduID.cz, SURFconext, GRNET, RCTSaai (16) |
| R&S | 12 July 2016 | 97 | 117 | AAF, PIONIER.Id, ACOnet, InCommon, SWITCHaai, UK federation, DFN AAI, Edugate, FEIDE, GRNET, SWAMID, IDEM, eduId.hu, eduID.cz, SURFconext, RCTSaai (16) |
| R&S | 16 August 2016 | 105 | 123 | ACOnet, DFN AAI, InCommon, IDEM, SWITCHaai, FEIDE, eduId.hu, SWAMID, eduID.cz, SURFconext, GRNET, RCTSaai, AAF, UK federation, Edugate, PIONIER.Id (16) |
| R&S | 13 September 2016 | 115 | 129 | ACOnet, DFN AAI, InCommon, IDEM, SWITCHaai, FEIDE, eduId.hu, SWAMID, eduID.cz, SURFconext, GRNET, RTCSaai, AAF, UK federation, Edugate, PIONIER.Id (16) |
| R&S | 13 October 2016 | 123 | 144 | AAF, ACOnet, GRNET, InCommon, SWITCHaai, SWAMID, UK federation, IDEM, DFN AAI, Edugate, FEIDE, PIONIER.Id, SURFconext, eduId.hu, eduId.cz, RTCSaai (16) |
| R&S | 19 December 2016 | 131 | 151 | ACOnet, UK federation, GRNET, InCommon, SWITCHaai, SWAMID, IDEM, DFN AAI, Edugate, FEIDE, PIONIER.Id, SURFconext, eduID.cz, eduID.hu (14) |
| R&S | 16 January 2017 | 134 | 155 | |
Federations that attended training: SWITCH, Aconet, Surfnet, LITNET, RedIRIS, AAF, BELNET, HEANET, CSC, AMRES, FCCN, WAYF, PSNC, Jisc, NIIF, CANARIE, REUNA, UNINETT, CESNET, SWAMID, ARNES, DFN, GARR, RENATER, AAI@HR, InCommon.
| ||||
| HfD | 10 September 2015 | N/A | 128 | UK, Grnet, SWAMID (note high numbers here not necessarily a good thing) |
| Category | Date | SP | IdP | Federations |
| CoCo | 10 September 2015 | 63 | 43 | SWITCH, Aconet, SWAMID, PIONIER.Id, Haka, DFN, IDEM, UK, Surfconext, AAI@EduHr, Feide, Renater, Peano, (13) |
| CoCo | 03 October 2015 | 65 | 46 | SWITCH, Aconet, SWAMID, PIONIER.Id, Haka, DFN, IDEM, UK, Surfconext, AAI@EduHr, Feide, Renater, Peano, GRnet, eduID.cz (15) |
| CoCo | 11 November 2015 | 75 | 47 | SWITCHaai, IDEM, SWAMID, DFN, Fédération Éducation-Recherche, Jaconet, FEIDE, HAKA, UK Federation, SURFconext, AAI@EduHr, PIONIER.Id, eduId.hu, eduID.cz, PEANO, GRNET (16) |
| CoCo | 7 December 2015 | 74 | 51 | HAKA / CSC, ACOnet, SWITCHaai, DFN, PIONER.Id, SWAMID, IDEM, Federation Education-Recherche, FEIDE, UK federation, SURFconext, AAI@EduHr, eduId.hu, eduId.cz, GRNET (15) |
| CoCo | 1 February 2016 | 78 | 52 | SWITCHaai, ACOnet, IDEM, SWAMID, DFN, Federation Education-Recherche, FEIDE, HAKA, UK Federation, Edugate, SURFconext, AAI@EduHr, PIONER.Id, eduID.cz, GRNET (15) |
| CoCo | 11 March 2016 | 79 | 60 | HAKA, ACOnet, SWITCHaai, DFN, Edugate, PIONIER.Id, SWAMID, IDEM, Federation Education-Recherche, FEIDE, UK Federation, SURFconext, AAI@EduHr, eduId.hu, eduId.cz, GRNET (16) |
| CoCo | 11 April 2016 | 83 | 68 | SWITCHaai, ACOnet, IDEM, SWAMID, DFN, Federation Education-Recherche, FEIDE, HAKA, UK federation, SURFconext, AAI@EduHr, PIONIER.Id, eduId.hu, eduId.cz, GRNET, Edugate (16) |
| CoCo | 10 May 2016 | 85 | 70 | SWITCHaai, ACOnet, IDEM, SWAMID, DFN, Fédération Éducation-Recherche, FEIDE, HAKA, UK federation, SURFconext, AAI@EduHr, PIONIER.Id, eduId.hu, GRNET, Edugate (15) |
| CoCo | 12 June 2016 | 86 | 81 | SWITCHaai, ACOnet, HAKA, DFN, Edugate, GRNET, IDEM, PIONIER.Id, SWAMID, AAI@EduHr, SURFconext, Fédération Éducation-Recherche, UK federation, eduId.hu, FEIDE (15) |
| CoCo | 16 August 2016 | 88 | 85 | SWITCHaai, ACOnet, IDEM, SWAMID, DFN AAI, Federation Education-Recherche, FEIDE, HAKA, SURFconext, AAI@EduHr, PIONIER.Id, UK federation, eduId.hu, GRNET, Edugate (15) |
| CoCo | 13 September 2016 | 95 | 91 | HAKA, ACOnet, GRNET, SWITCHaai, DFN AAI, Edugate, PIONIER.Id, IDEM, SWAMID, Federation Education-Recherche, FEIDE, eduId.hu, SURFconext, AAI@EduHr, eduId.cz, UK federation (16) |
| CoCo | 13 October 2016 | 96 | 102 | SWITCHaai, ACOnet, IDEM, SWAMID, DFN AAI, Federation Education-Recherche, FEIDE, eduId.hu, HAKA, SURFconext, AAI@EduHr, eduId.cz, PIONIER.Id, UK federation, GRNET, Edugate (16) |
| CoCo | 19 December 2016 | 104 | 106 | SWITCHaai, ACOnet, IDEM, SWAMID, DFN AAI, Federation Education-Recherche, FEIDE, eduID.hu, HAKA, SURFconext, AAI@EduHr, eduID.cz, PIONIER.Id, UK federation, GRNET, Edugate (16) |
| CoCo | 16 January 2017 | 105 | 108 | |
Federations that attended training: SWITCH, Aconet, Surfnet, LITNET, RedIRIS, AAF, BELNET, HEANET, CSC, AMRES, FCCN, WAYF, PNC, Jisc, NIIF, CANARIE, REUNA, UNINETT, CESNET, SWAMID, ARNES, DFN, GARR, RENATER, AAI@HR, InCommon.