Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Table of Contents

Participants

...

Panel
titleContact dataProposers


NameOrganisation
SURFnet



Please provide contact details for participants involved in this activity
Panel
title
GN4-3 project
team


Name
Email
OrganisationRole
Submitter name & email:
niels.vandijk@surfnet.nl
SURFnetP.I.

Other participants

Michael.Schmidt@lrz.de
DFN-LRZScrum master

Mihály Héder

mihaly.heder@sztaki.mta.hu
KIFUMember
nalimadhi@rash.al
RASHDev
Vangjel Stavro
vstavro@rash.al
RASHDev
klaas.wierenga@geant.org
GEANT AssociationMentor




lpaglione@sphericalcowgroup.com 
Panel
titleContact data of Parties involvedStakeholders


Name

Organisation

Role 
Laura PaglioneORCID

Please provide names and contact details for additional (external) organisations involved in this Incubator project

Organisation Name
Person names
Person emailRole within pilot

 ORCID

 Laura Paglione
 ORCID contact person
 T1 eduTEAMS
Christos Kanellopoulos
(eduTEAMS)christos.kanellopoulos@geant.org
GEANT AssociationeduTEAMS Service Owner


Activity Overview

Panel
titleDescription

Many research collaborations as well as campus services need a solution to deal with guest identity, as in many cases not all users are members of the academic Identity Federations. As a result several federation operators as well as research collaborations operate IdPs or proxies to allow users to authenticate trough external identity providers like social ones. THis has lead to serious reinventing of the the wheel. The need for guest identities burdens the SPs with the integration costs and along the way may force guest users to use specific IdPs as implemented by the SP, which they may not want or may not be able to use, only because the SP decided only to implement a few of these solutions. In the GN4-2 project a first pilot was run as part of the eduTEAMS activity to investigate if a centralized service could be offered to resolve these issues. The aim of eduTEAMS service was to resolve these issues by providing a solution that is technically alike any other IdP in edUGAIN so the integration cost is reduced to zero,  and offers multiple IdPs so the guest users may choose what they want/can to use.

This pilot aims to bring ORCID into the IDhub solution, with formal support from ORCID. It also investigates the (technical) improvements needed to better scale the IDhub solution and will begin a dialog with the service activities to make the pilot move towards a full service offering under the GEANT umbrella.


Panel
titlePilot goalsGoals
The project is finished when ORCID can be used for authentication in eduGAIN in production.

...

Activity Details

Panel
titleTechnical details
Technically this is an application of SATOSA where the south side is a SAML IdP exposed to GEANT or other SAML federations the north side is ORCID API, which is based on OAuth.

...