Page History

• analyse how much has been developed to leverage federated access with other authentication systems used in

• the R&E

• eduGAIN to offer Single Sign-On for web applications;

• Libraries that still use IP-based access;

• PRACE and EGI that use digital certificates,

• Government spaces that rely on national e-IDs and STORK. A citizen who is also a student or an educator could in principle link a government identity with an educational one, with the possibility to access different context providers during the different ages, i.e. at the education stage and at the university stage.

This work package will carry out research to:

• Facilitate access to resources and collaboration between researchers, students and educators;

• Reduce duplication of efforts for developing and deploying AAI services common to many e-infrastructures;

• Explore the technical elements needed for the integrated AAI: attribute frameworks and deployable non-web technologies;

• Expand the coverage of national identity federations for network, services and applications by supporting research institutions with low levels of technical or organisational preparedness by delivering easy-to-use solutions for them to enable federated access.

• communities, in the eGov space and in the commercial sector;

• research a possible solution to link identities in the contest of higher levels of assurance, attribute providers and guest identities;

• assess existing technologies to provide SSO for non-Web applications (cloud, storage and so on) and offer recommendations for their usage;

• develop a risk-based model for existing AAI solutions;

• propose models for supporting guest identities (NRENs’ in-house solutions vs commercially-offered solutions should be explored);

• define a blueprint architecture to enable web and non-web SSO capabilities across different infrastructures, integrating attribute providers/group management tools operated by user-communities;

• provide models for federated authorisation: how to integrate attributes and permissions from diverse communities, making them available at the federation level in a consistent and secure way.

 

The activity is structured in four tasks:

Task ID	Task	Leader
Task 1 (JRA1.1)	Requirements Gathering	Peter Solagna (EGI.eu)
Task 2 (JRA1.2)	Blueprint Architectures	Marcus Hardt (KIT)
Task 3 (JRA1.3)	Guest Identities	Jens Jensen - STFC UKRI (STFC)
Task 4 (JRA1.4)	Models for implementing Attribute Providers and Token Translation Services	Davide Vaghetti (GARR)

 

Image Added