Page tree

Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

This page describes the current practice of federations with regard to upstream and downstream metadata publication. Additional information and a recommendation how to best handle local/eduGAIN metadata for a SAML-based identity federation can also be found on Best Current Practices on Joining eduGAIN. (page in Federation, update link)


Upstream Approaches:

  • Full Opt-in.
  • Full Opt-out.
  • IdP Opt-in, SP Opt-Out.
  • IdP Opt-out, SP Opt-in (Recommended)

Downstream Approaches:

  • Everything in local feed.
  • Choose local or local+interfederation.
  • Separate1 (all).
  • Seperate2 (IdP, SP).
  • Separate3 (all,IdP, SP).
  • Consume directly from MDS. (Not recommended!)
  • Custom.


Federation 

Upstream                            

  Downstream              

Armenia

Full Opt-Out

 
Austria - eduID.at/ACOnet Identity Federation Full Opt-InEntities choose either local or local+interfed feed
AustraliaFull Opt-In  
Belarus?? 
Belgium - Belnet FederationFull Opt-InEntities consume the MDS metadata directly
Brazil - CaFeFull Opt-InEntities consume the MDS metadata directly
Canada - Canadian Access FederationFull Opt-InImported entities in a separate aggregate (all)
Chile - COFReFull Opt-InImported entities into 2 separate aggregates (SP, IdP)
Colombia - COLFIREFull Opt-InEntities consume the MDS metadata directly
Croatia - AAI@EduHrIdP Opt-Out, SP Opt-InImported entities in main (local) aggregate
Czech Republic - eduID.czFull Opt-InEntities choose either local or local+interfed feed
Denmark - WAYFIdP Opt-In, SP Opt-OutCurrently working on new approach
Ecuador - MINGAFull Opt-InEntities consume the MDS metadata directly
Estonia - TAATFull Opt-InImported entities in 3 separate aggregates (all, SP, IdP)
Finland - HAKAFull Opt-Incustom metadata per entity

France - Fédération Éducation-Recherche 

IdP Opt-Out, SP Opt-InImported entities into 2 separate aggregates (SP, IdP)
Georgia - Grena Identity FederationFull Opt-Inunknown
Germany - DFNFull Opt-InImported entities into 2 separate aggregates (SP, IdP)
Greece - GRNET!Full Opt-InImported entities into 2 separate aggregates (SP, IdP)
Hungary - eduId.huFull Opt-InImported entities in a separate aggregate (all)
IndiaIdP Opt-Out, SP Opt-In 
Ireland - EdugateFull Opt-Incustom metadata per entity
Israel - IUCC Identity FederationFull Opt-InEntities consume the MDS metadata directly
Italy - IDEMIdP Opt-Out, SP Opt-InImported entities in a separate aggregate (all)
Japan - GakuNinFull Opt-Inunknown
KoreaFull Opt-In 
Latvia - LAIFEFull Opt-InImported entities in 3 separate aggregates (all, SP, IdP)
Lithuania - LITNET FEDIFull Opt-InImported entities in 3 separate aggregates (all, SP, IdP)
Luxembourg - eduID LuxembourgFull Opt-Inunknown
MacedoniaFull Opt-Out 
MoldovaFull Opt-Out 
Norway - FEIDEFull Opt-InImported entities in a separate aggregate (all)
Poland - PIONIER.IdFull Opt-InImported entities into 2 separate aggregates (SP, IdP)
Portugal - RCTSaaiFull Opt-Inunknown
Slovenia - ArnesAAIFull Opt-InImported entities into 2 separate aggregates (SP, IdP)
South Africa - SAFIREIdP Opt-Out, SP Opt-InImported entities in a separate aggregate (IdP)
Spain - SIRFull Opt-In

Entities consume the MDS metadata directly

IdPs have custom feeds built

Sweden - SWAMIDIdP Opt-Out, SP Opt-InImported entities in main aggregate
Switzerland - SWITCHaaiFull Opt-InLocal feed + imported entities in 2 separate aggregates (SP, IdP)
The Netherlands - SURFconextFull Opt-IneduGAIN SPs need to be separately onboarded
U.S. - InCommonIdP Opt-Out, SP Opt-InImported entities in main (local) aggregate
Ukraine - PEANOFull Opt-InImported entities in a separate aggregate (all)
United Kingdom - UK federationFull Opt-Out (IdP and SP)Imported entities in main (local) aggregate