Instructions
This section asks for your feedback on services and developments currently in GN4-2 and how you see they should be positioned in GN4-3 (from 2019 on).
They've been grouped by rough groupings rather than the internal project codes or current project structure as knowledge of GEANT project structure should not be a requirement to evaluate them. Please use the comments section if you'd like to break down the groupings more e.g. if you think one aspect should be stopped but not all.
You can indicate if you think it should be maintained, significantly changed/enhanced or dropped by adding +1 to the relevant column and adding extra detail in comments.
e.g.
Name | Maintain | Change | Drop | Comment |
---|---|---|---|---|
Example service 1 | +1 (yourname - optional, but makes clarification easier) | This is the best example service ever! Keep it.(yourname - optional) | ||
Example service 2 | +1 | Nobody is using this service, it is too complicated |
You can also indicate if GÉANT project, GÉANT community (independently of project) or another group should be the main driver if you have opinions on those matters.
If you are not sure of the current status or direction of any of these services, feel free to check details with the listed people, or simply say what you think it should be, or contact Ann, Marina or Klaas for more info.
Table of Developments and Services
Name | Maintain/Continue | Change/Improve | Drop/Retire | Comment |
---|---|---|---|---|
eduroam core servicesETLRS operation Info Contact: Miro Milinovic | +1 (Stefan Winter) | |||
eduroam supporting servicesCAT, monitor.eduroam.org etc. Info Contact: Stefan Winter/Miro Milinovic | +1 (Stefan Winter) | |||
eduroam Managed IdP(small and large site approaches) Info Contact: Stefan Winter | +1 (Stefan Winter) | develop into production service (Stefan Winter) | ||
eduroam diagnostics(end user diagnostics, probes etc.) Info Contact: Stefan Winter | +1 (Stefan Winter) | develop into production service (Stefan Winter) | ||
radsec - let's radsecInfo Contact: Stefan Winter/Paul Dekkers | ||||
eduGAIN CoreMDS operation, SG secretariat & support for federations Info Contact: Tomasz Wolniewicz (tech)/Brook Schofield | +1 (Thomas Lenggenhager) +1 (Wolfgang Pempe) +1 (SURFnet) | Continue the stable service (Thomas Lenggenhager) Move into operations without using project funding (SURFnet) | ||
eduGAIN supporting servicesTools such as IsFederated, ECCS etc. aggregated into technical/edugain.org Info Contact: Tomasz Wolniewicz, Lukas Hämmerle | +1 (Thomas Lenggenhager) +1 (Wolfgang Pempe) +1 (SURFnet) | Consolidate separate tools into one service (SURFnet) | Useful tools (Thomas Lenggenhager) Move into operations, without project funding, where applicable (SURFnet) | |
eduGAIN enhanced supportTroubleshooting coordination/support for complex interfederation issues, central SIRTFI support where needed, SP reg of last resort via UK Federation. Info Contact: Lukas Hämmerle | +1 (Thomas Lenggenhager) +1 (Wolfgang Pempe) +1 (SURFnet) | Develop model so this can be moved into operations without using project funding (SURFnet) Evaluate the SP of last resort registration (uptake, policy, do we still want / need this?) (SURFnet) | Registry of last resort with good support could be useful. Help candidate fed ops to increase their know-how and learn from others. (Thomas Lenggenhager) Based on the AARC recommendations, I'd advocate for the SP registry to be promoted more not only as an eduGAIN enhancement but as a capability for GEANT to not only broker contracts on behalf of the members but also offer the technical platform to connect SPs to eduGAIN. Specifically I'm referrring to SPs that are explicitly global or pan european in scale and have little direct working relationshoip with federations, and/or those for which GEANT has a framework agreement. See also eduGAIN SG thread eduGAIN-integration" for not-really-interested SPs" from 11/9/2017 | |
eduGAIN BCPRecommended practices for federations and their entities e.g. SIRTFI adoption, Assurance Profiles, MFA BCP etc. Info Contact: Nicole Harris/Pål Axelsson | +1 (SURFnet) | Keep it simple, mainly as a check-list with links to the details. (Thomas Lenggenhager) +1 for Thomas' comment (Wolfgang Pempe) | ||
Federation as a ServiceFederation platform: MDA, RR, HSM etc. as a service. Info Contact: Marina Adomeit | Investigate how much this can help federation uptake outside EU (SURFnet). | How successful is it? Is it worth the effort to continue? (Thomas Lenggenhager) +1 for Thomas' comment (Wolfgang Pempe) Evaluate how much this has helped the organizations without federation, can we say something about future growth? (SURFnet) | ||
Campus IdPtoolkits, platform for provisioning and/or managed service Info Contact: Mario Reale | +1 (Thomas Lenggenhager) +1 (Wolfgang Pempe) | Not relevant for us (Thomas Lenggenhager) | ||
InAcademiaNote: Current intent is to operate via GÉANT Org, not project once in production. Info Contact: Niels van Dijk | +1 (Thomas Lenggenhager) +1 (Wolfgang Pempe) +1 (SURFnet) | |||
eduTEAMSgroup management, ID Hub (guest solution) as basic offer, advanced offer can include HEXXA, Perun etc. Info Contact: Niels van Dijk | +1 (Thomas Lenggenhager) +1 (Wolfgang Pempe) | Investigate how to operate this wihtout project funding (SURFnet) | ||
Discoverycentral/common/distributed/federated discovery service with improved usability Info Contact: Lukas Hämmerle | +1 (Wolfgang Pempe) +1 (SURFnet) | +1 (Thomas Lenggenhager) | Don't forget the hub-and-spokies (SURFnet) | |
eduKEEPUser-centric Identity Federations, eduID initiatives Info Contact: Maarten Kremers | +1 (Thomas Lenggenhager) +1(Constantin Sclifos) +1 (Wolfgang Pempe) | Investigate role of eduKEEP in disconnecting authentication from attributes. Role of government IDs, eIDAS (SURFnet). | ||
StepUp Services - Assurance & MFAstepUp Assurance, Authentication (MFA) etc. Info Contact: Maarten Kremers | +1 (Wolfgang Pempe) +1 (SURFnet) | +1 (Thomas Lenggenhager) | ||
OIDCProfile for eduGAIN, Federation BCP, any needed infrastructure to support global interop Info Contact: Maarten Kremers | +1(Constantin Sclifos) +1 (SURFnet) | +1 (Thomas Lenggenhager) +1 (Wolfgang Pempe) | Create OIDC Testbed for FedOps (Wolfgang Pempe) Create OIDC2Int (SURFnet) | |
Cross sector interoperabilityesp. interoperability with eIDAS Info Contact: Christos Kanellopolous | +1 (Wolfgang Pempe) +1 (SURFnet) | +1 (Thomas Lenggenhager) | No priority (Thomas Lenggenhager) Stay connected with the eIDAS folks (Wolfgang Pempe) Work towards pan-european solutions (SURFnet) | |
eduPKIInfo Contact: Reimer Karlsen-Masur | +1(Constantin Sclifos) +1 Reimer Karlsen-Masur | |||
Certificate TransparencyInfo Contact: Linus Nordberg | +1(Constantin Sclifos) +1 (SURFnet) + 1 (DFN-PKI) | + 1 (DFN-PKI) |