eduGAIN Steering Group Meeting
Monday 24th April 2017, 10:30 - 11:30 EDT (in your timezone)
Please Note that the above time is CONFIRMED.
|Arrival & "Can you hear me now?" via https://connect.sunet.se/edugain|
Welcome, Introductions & Agenda Agreement
|Revision of the eduGAIN Policy Framework|
Next Steps: WebSSO profile, SAML2Int and Updates
Support Enhancements - Ann Harding
Summary of Current Status
Future SG Meetings
Forums People Attend? TNC, RDA, Other.
Any other Business
Summary, Actions and Close (or we're running over time).
...another meeting starts in this room.
Federations in Attendance (14):
- Virtual: AAF, CANARIE, SURFconext, PIONIER.ID, NIIFI/eduID.hu (5)
- Physical: AAF, SURFconext, SGAF, SWAMID, SWITCHaai, GakuNin, UK Federation, InCommon, eduID.cz, LEAF, CARSI (11).
- Brook Schofield
- Arnout Terpstra
- Guy Halse
- Miro Milinovic
- Terry Smith
- Pal Axelsson
- Chris Phillips
- Thomas Wolniewicz
- Kristof Bajnok
- Brook Schofield
- Heath Marks
- Rhys Smith
- Michale Diana
- Klaas Wierenga
- Nick Roy
- Nicole Harris
- Payton Gonzales, ForgeRock
- AJ Folédas, Virginia Tech
- EJ Monti
- Petr Vsetecka
- James Brewer, UPenn
- Peter Bogatencov
- Motonori Nakamura
- XiaoDoxj Fu, Cernet
- Bella Gao
- William Wan
- Kevin Sale
- Mandeep Saini
- Valter Nordh
- Scott Koranda
- Pål Axelsson
- Ann Harding
- Maarten Kremers
- Licia Floria
- Francis Lee
- Wolfgang Pempe (DFN)
Revision of the eduGAIN Policy Framework:
Valter Nordh provided an update on the progress of getting the Constitution v3 revision ratified by the eduGAIN Exec. The GÉANT Board has the role of the eduGAIN Exec team. As of last week, the whole Board has voted in favour of the v3 Constitution, and have also put forward some ideas for a future version. The agreement of the Board needs to be minuted, and then an official announcement will be made. Valter is happy for this official announcement to be made as of now and come into affect on the 1st of August 2017. In the remaining 90 days from 24.04.17 a SAML profile will need to be in place. Nicole and Brook are working on this.
Nicole is working on updating the policy set for eduGAIN, which includes the Declaration (no updates planned), the Constitution (as above) and the Profiles. The aim is to take the various Profiles and create a general technology-agnostic Profile that can be applied to SAML, OIDC, Moonshot. The documents can be found at http://edugain.org/policy
The attribute Profile will be replaced with a best current practice document (BCP) which will outline what Federations should be supporting.
WebSSO profile :
Currently only says to use SAML2Int. Nicole is seeking feedback from the SG on this so as to determine where to position within the document set. The timescale is quite tight, so please respond to Nicole if you have not already done so.
Nick Roy, InCommon has been active in the federation operability working group (Kantara) to update their profile on SAML2Int, for example complying with OASIS metadata statements. Nick Roy invited others to join that working group to collaborate.
Support enhancements - Ann Harding:
eduGAIN has a strong support structure, which handles about 90-95% of federation support cases. Only 5-10% of these are inter-federation related.
This enhanced eduGAIN Support model is for handling those inter-federation cases which are complex. It is not for end users but will provide a safety net to ensure support cases do not get lost. It is currently focused on the performance element of inter-federation, but will also consider security incident handling, so SIRTFI is related but distinct. Performance and security cases will share some infrastructure but will not be one and the same team. A centralised infrastructure of enhanced eduGAIN support, with specialists assigned to each, and different queues within a shared ticketing system.
The performance element is currently in Pilot for 6 months, and then will pitch for full time adoption in eduGAIN; for SIRTFI the status is gathering requirements before entering into a Pilot, roughly staggered 6 months behind the performance element. If you have support cases, please send them!
Current status - New members and candidates:
See http://edugain.org/technical/status.php and work on progressing new members is underway.
- EduGAIN SG-2017June
- Virtual Meeting in August 2017 (Physical component at APAN44)
- eduGAIN Town Hall - end 2017/early 2018